@haposoft/cafekit 0.18.0 → 0.18.2

package/src/claude/skills/test/references/execution-strategy.md

@@ -20,27 +20,20 @@ marker. Resolve all accepted paths inside the target feature directory.
   marker, malformed or duplicate task fields, symlink, directory, device, or
   other nonregular flat marker returns `BLOCKED`.
 
-### Legacy markers
+### Packets the runtime no longer reads
 
-- Legacy markers are `spec.json`, nested legacy tasks, or separate legacy
-  receipts. Detect them even when orphaned or broken.
-- Legacy is selected only when a regular schema-valid `spec.json` has one
-  consistent identity and registry resolving every contained nested task and
-  receipt, and no flat marker exists.
-- Orphan nested tasks/receipts, absent or schema-invalid root, conflicting
-  identities, symlinks, nonregular markers, or unresolved/out-of-root entries
-  return `BLOCKED`.
+- A packet directory with no `plan.md` that holds the old JSON planning state is not
+  read by CafeKit. Return `BLOCKED` and name it; never migrate it while testing.
+- Other files beside a valid `plan.md` do not change its classification.
 
 ### Precedence truth table
 
-| Flat state | Legacy state | Result |
+| Flat state | Old planning state without `plan.md` | Result |
 |---|---|---|
-| valid | absent | process-first |
-| absent | valid | legacy adapter |
+| valid | any | process-first |
+| invalid | any | `BLOCKED` |
+| absent | present | `BLOCKED`: unsupported, move the work to a `plan.md` packet |
 | absent | absent | ordinary non-Spec scope |
-| any marker | any marker | `BLOCKED` mixed state |
-| invalid | absent | `BLOCKED` |
-| absent | invalid | `BLOCKED` |
 
 Do not infer that an invalid marker is absent. Testing never repairs, migrates,
 renames, deletes, or chooses between conflicting packet identities.
@@ -181,7 +174,7 @@ packet failed classification after the repository had a commit:
   },
   "proof_level": "source",
   "expected": "both Named probes pass under `node --test test/login.test.js`",
-  "observed": "BLOCKED before execution: specs/user-auth also holds spec.json, a legacy marker",
+  "observed": "BLOCKED before execution: specs/user-auth/task-01-login.md is a symlink",
   "reachability": {
     "status": "BLOCKED",
     "evidence": [
@@ -287,9 +280,5 @@ Do not paste verbose raw output, full JSON, credentials, PII, or screenshots int
 the report. Do not write a report file during proof. Process-first Status and
 inline `## Receipt` remain controller-only.
 
-## Legacy workflow compatibility
-
-After a valid legacy route, preserve its v2.1 task/receipt adapter and existing
-proof rules. Separate legacy receipts remain legacy-only. Never search for or
-create a separate receipt for a process-first task, and never copy a legacy
-receipt into a flat task.
+Proof for a process-first task lives only in its inline `## Receipt`; never
+search for or create a receipt file beside it.

package/src/claude/skills/ui-ux/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: cf:ui-ux
-description: "Build, review, or redesign an in-app screen (dashboard, list, table, form, settings, modal) the way a designer works: brief, 2–3 wireframes, the user picks, then build with the project's own components and measure the page with a browser probe. Other routes on request: review an existing UI ('xem giúp', 'review', 'nhìn rối', 'what's wrong'), rebuild keeping the brand ('giữ brand', 'keep the brand'), rebuild in the skill's own style ('bỏ style cũ'), refactor keeping the look ('chuyển sang Tailwind'), build right away ('dựng luôn', 'just build it'), design system first ('UI kit', 'component library'), a simple logo ('làm logo', 'design a logo'), or fix one component. Triggers: 'dựng màn', 'thiết kế', 'làm UI cho đẹp', 'làm lại UX', 'build a page', 'design this screen', 'redesign', 'make it look good', 'ecommerce', 'ui-ux', 'evon'. Landing pages, storefronts and blogs are not covered (it still builds them, with a warning)."
+description: "Build, review, or redesign an in-app screen (dashboard, list, table, form, settings, modal) the way a designer works: brief, 2–3 wireframes, the user picks, then build with the project's own components and measure the page with a browser probe. On request it also reviews an existing UI, rebuilds with or without the current brand, refactors styling while keeping the look, builds immediately without wireframes, builds a design system or component kit first, makes a simple logo, or fixes one component, for Vietnamese or English requests ('dựng màn', 'thiết kế', 'làm UI cho đẹp', 'làm lại UX', 'xem giúp', 'nhìn rối', 'giữ brand', 'bỏ style cũ', 'dựng luôn', 'làm logo', 'build a page', 'redesign', 'ui-ux', 'evon'). Landing pages, storefronts and blogs are not covered (it still builds them, with a warning)."
 license: MIT
 user-invocable: true
 when_to_use: "Invoke to build, review, or redesign an app screen with wireframes and a measured probe; for palette, font, or UX-guideline lookups use cf:ui-ux-pro-max."

package/src/claude/skills/ui-ux-pro-max/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: cf:ui-ux-pro-max
-description: "UI/UX design intelligence for web and mobile. Includes 50+ styles, 161 color palettes, 57 font pairings, 161 product types, 99 UX guidelines, and 25 chart types across 10 stacks (React, Next.js, Vue, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui, and HTML/CSS). Actions: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor, and check UI/UX code. Projects: website, landing page, dashboard, admin panel, e-commerce, SaaS, portfolio, blog, and mobile app. Elements: button, modal, navbar, sidebar, card, table, form, and chart. Styles: glassmorphism, claymorphism, minimalism, brutalism, neumorphism, bento grid, dark mode, responsive, skeuomorphism, and flat design. Topics: color systems, accessibility, animation, layout, typography, font pairing, spacing, interaction states, shadow, and gradient. Integrations: shadcn/ui MCP for component search and examples."
+description: "Searchable UI/UX lookup database for web and mobile products: 50+ visual styles, 161 color palettes, 57 font pairings, 161 product types with reasoning rules, 99 UX guidelines, 25 chart types, Google Fonts, and React Native stack guidance. Use to pick or justify a palette, font pairing, visual style, chart type, or UX guideline for a product type. It does not build, review, or redesign screens; that is cf:ui-ux, which can consult this skill for lookups."
 user-invocable: true
 when_to_use: "Invoke to look up color palettes, font pairings, product-type styles, or UX guidelines; to build or review a screen use cf:ui-ux."
 category: frontend
@@ -11,45 +11,13 @@ metadata:
 ---
 # UI/UX Pro Max - Design Intelligence
 
-Comprehensive design guide for web and mobile applications. Contains 50+ styles, 161 color palettes, 57 font pairings, 161 product types with reasoning rules, 99 UX guidelines, and 25 chart types across 10 technology stacks. Searchable database with priority-based recommendations.
+Searchable design database for web and mobile products: 50+ styles, 161 color palettes, 57 font pairings, 161 product types with reasoning rules, 99 UX guidelines, 25 chart types, and stack guidance for React Native only.
 
 ## When to Apply
 
-This Skill should be used when the task involves **UI structure, visual design decisions, interaction patterns, or user experience quality control**.
+Use this skill to look something up: a palette, font pairing, or visual style for a product type, a chart type, or the UX guideline that applies to a pattern.
 
-### Must Use
-
-This Skill must be invoked in the following situations:
-
-- Designing new pages (Landing Page, Dashboard, Admin, SaaS, Mobile App)
-- Creating or refactoring UI components (buttons, modals, forms, tables, charts, etc.)
-- Choosing color schemes, typography systems, spacing standards, or layout systems
-- Reviewing UI code for user experience, accessibility, or visual consistency
-- Implementing navigation structures, animations, or responsive behavior
-- Making product-level design decisions (style, information hierarchy, brand expression)
-- Improving perceived quality, clarity, or usability of interfaces
-
-### Recommended
-
-This Skill is recommended in the following situations:
-
-- UI looks "not professional enough" but the reason is unclear
-- Receiving feedback on usability or experience
-- Pre-launch UI quality optimization
-- Aligning cross-platform design (Web / iOS / Android)
-- Building design systems or reusable component libraries
-
-### Skip
-
-This Skill is not needed in the following situations:
-
-- Pure backend logic development
-- Only involving API or database design
-- Performance optimization unrelated to the interface
-- Infrastructure or DevOps work
-- Non-visual scripts or automation tasks
-
-**Decision criteria**: If the task will change how a feature **looks, feels, moves, or is interacted with**, this Skill should be used.
+Building, reviewing, or redesigning a screen belongs to `cf:ui-ux`, which follows the project's own components and measures the page; it can call this skill when it needs a lookup. Backend, API, infrastructure, and non-visual work need neither skill.
 
 ## Rule Categories by Priority
 
@@ -313,28 +281,7 @@ Search specific domains using the CLI tool below.
 
 ## Prerequisites
 
-Check if Python is installed:
-
-```bash
-python3 --version || python --version
-```
-
-If Python is not installed, install it based on user's OS:
-
-**macOS:**
-```bash
-brew install python3
-```
-
-**Ubuntu/Debian:**
-```bash
-sudo apt update && sudo apt install python3
-```
-
-**Windows:**
-```powershell
-winget install Python.Python.3.12
-```
+Run `search.py` from the project root with `python3 .claude/skills/ui-ux-pro-max/scripts/search.py` (Windows: `python .claude\skills\ui-ux-pro-max\scripts\search.py`). It uses only the Python standard library, so no venv or extra install is needed.
 
 ---
 
@@ -362,14 +309,14 @@ Extract key information from user request:
 - **Product type**: Entertainment (social, video, music, gaming), Tool (scanner, editor, converter), Productivity (task manager, notes, calendar), or hybrid
 - **Target audience**: C-end consumer users; consider age group, usage context (commute, leisure, work)
 - **Style keywords**: playful, vibrant, minimal, dark mode, content-first, immersive, etc.
-- **Stack**: React Native (this project's only tech stack)
+- **Stack**: the target project's stack; `--stack` guidance exists only for `react-native`
 
-### Step 2: Generate Design System (REQUIRED)
+### Step 2: Generate Design System
 
-**Always start with `--design-system`** to get comprehensive recommendations with reasoning:
+Start with `--design-system` when choosing a whole direction (style, palette, type) for a new product or page; for a single lookup go straight to Step 3:
 
 ```bash
-python3 skills/ui-ux-pro-max/scripts/search.py "<product_type> <industry> <keywords>" --design-system [-p "Project Name"]
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "<product_type> <industry> <keywords>" --design-system [-p "Project Name"]
 ```
 
 This command:
@@ -380,7 +327,7 @@ This command:
 
 **Example:**
 ```bash
-python3 skills/ui-ux-pro-max/scripts/search.py "beauty spa wellness service" --design-system -p "Serenity Spa"
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "beauty spa wellness service" --design-system -p "Serenity Spa"
 ```
 
 ### Step 2b: Persist Design System (Master + Overrides Pattern)
@@ -388,7 +335,7 @@ python3 skills/ui-ux-pro-max/scripts/search.py "beauty spa wellness service" --d
 To save the design system for **hierarchical retrieval across sessions**, add `--persist`:
 
 ```bash
-python3 skills/ui-ux-pro-max/scripts/search.py "<query>" --design-system --persist -p "Project Name"
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "<query>" --design-system --persist -p "Project Name"
 ```
 
 This creates:
@@ -397,7 +344,7 @@ This creates:
 
 **With page-specific override:**
 ```bash
-python3 skills/ui-ux-pro-max/scripts/search.py "<query>" --design-system --persist -p "Project Name" --page "dashboard"
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "<query>" --design-system --persist -p "Project Name" --page "dashboard"
 ```
 
 This also creates:
@@ -422,7 +369,7 @@ Now, generate the code...
 After getting the design system, use domain searches to get additional details:
 
 ```bash
-python3 skills/ui-ux-pro-max/scripts/search.py "<keyword>" --domain <domain> [-n <max_results>]
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "<keyword>" --domain <domain> [-n <max_results>]
 ```
 
 **When to use detailed searches:**
@@ -440,14 +387,13 @@ python3 skills/ui-ux-pro-max/scripts/search.py "<keyword>" --domain <domain> [-n
 | Landing structure | `landing` | `--domain landing "hero social-proof"` |
 | React Native perf | `react` | `--domain react "rerender memo list"` |
 | App interface a11y | `web` | `--domain web "accessibilityLabel touch safe-areas"` |
-| AI prompt / CSS keywords | `prompt` | `--domain prompt "minimalism"` |
 
-### Step 4: Stack Guidelines (React Native)
+### Step 4: Stack Guidelines (React Native projects only)
 
-Get React Native implementation-specific best practices:
+For a React Native project, get implementation-specific best practices:
 
 ```bash
-python3 skills/ui-ux-pro-max/scripts/search.py "<keyword>" --stack react-native
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "<keyword>" --stack react-native
 ```
 
 ---
@@ -468,7 +414,6 @@ python3 skills/ui-ux-pro-max/scripts/search.py "<keyword>" --stack react-native
 | `google-fonts` | Individual Google Fonts lookup | sans serif, monospace, japanese, variable font, popular |
 | `react` | React/Next.js performance | waterfall, bundle, suspense, memo, rerender, cache |
 | `web` | App interface guidelines (iOS/Android/React Native) | accessibilityLabel, touch targets, safe areas, Dynamic Type |
-| `prompt` | AI prompts, CSS keywords | (style name) |
 
 ### Available Stacks
 
@@ -488,10 +433,10 @@ python3 skills/ui-ux-pro-max/scripts/search.py "<keyword>" --stack react-native
 - Style keywords: modern, minimal, content-first, dark mode
 - Stack: React Native
 
-### Step 2: Generate Design System (REQUIRED)
+### Step 2: Generate Design System
 
 ```bash
-python3 skills/ui-ux-pro-max/scripts/search.py "AI search tool modern minimal" --design-system -p "AI Search"
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "AI search tool modern minimal" --design-system -p "AI Search"
 ```
 
 **Output:** Complete design system with pattern, style, colors, typography, effects, and anti-patterns.
@@ -500,16 +445,16 @@ python3 skills/ui-ux-pro-max/scripts/search.py "AI search tool modern minimal" -
 
 ```bash
 # Get style options for a modern tool product
-python3 skills/ui-ux-pro-max/scripts/search.py "minimalism dark mode" --domain style
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "minimalism dark mode" --domain style
 
 # Get UX best practices for search interaction and loading
-python3 skills/ui-ux-pro-max/scripts/search.py "search loading animation" --domain ux
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "search loading animation" --domain ux
 ```
 
 ### Step 4: Stack Guidelines
 
 ```bash
-python3 skills/ui-ux-pro-max/scripts/search.py "list performance navigation" --stack react-native
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "list performance navigation" --stack react-native
 ```
 
 **Then:** Synthesize design system + detailed searches and implement the design.
@@ -522,10 +467,10 @@ The `--design-system` flag supports two output formats:
 
 ```bash
 # ASCII box (default) - best for terminal display
-python3 skills/ui-ux-pro-max/scripts/search.py "fintech crypto" --design-system
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "fintech crypto" --design-system
 
 # Markdown - best for documentation
-python3 skills/ui-ux-pro-max/scripts/search.py "fintech crypto" --design-system -f markdown
+python3 .claude/skills/ui-ux-pro-max/scripts/search.py "fintech crypto" --design-system -f markdown
 ```
 
 ---
@@ -537,7 +482,7 @@ python3 skills/ui-ux-pro-max/scripts/search.py "fintech crypto" --design-system
 - Use **multi-dimensional keywords** — combine product + industry + tone + density: `"entertainment social vibrant content-dense"` not just `"app"`
 - Try different keywords for the same need: `"playful neon"` → `"vibrant dark"` → `"content-first minimal"`
 - Use `--design-system` first for full recommendations, then `--domain` to deep-dive any dimension you're unsure about
-- Always add `--stack react-native` for implementation-specific guidance
+- Add `--stack react-native` only when the target project is React Native
 
 ### Common Sticking Points
 

package/src/claude/skills/web-testing/SKILL.md

@@ -26,15 +26,9 @@ npx @axe-core/cli https://example.com  # Accessibility
 npx lighthouse https://example.com     # Performance
 ```
 
-## Testing Strategy (Choose Your Model)
+## Testing Strategy
 
-| Model | Structure | Best For |
-|-------|-----------|----------|
-| Pyramid | Unit 70% > Integration 20% > E2E 10% | Monoliths |
-| Trophy | Integration-heavy | Modern SPAs |
-| Honeycomb | Contract-centric | Microservices |
-
-→ `./references/testing-pyramid-strategy.md`
+Choosing between pyramid, trophy, and honeycomb: `./references/testing-pyramid-strategy.md`
 
 ## Reference Documentation
 
@@ -88,15 +82,3 @@ node ./scripts/analyze-test-results.js \
   --output markdown
 ```
 Parses Playwright/Vitest/JUnit results into unified summary.
-
-## CI/CD Integration
-
-```yaml
-jobs:
-  test:
-    steps:
-      - run: npm run test:unit      # Gate 1: Fast fail
-      - run: npm run test:e2e       # Gate 2: After unit pass
-      - run: npm run test:a11y      # Accessibility
-      - run: npx lhci autorun       # Performance
-```

package/src/codex/AGENTS.md

@@ -1,5 +1,9 @@
 ## Codex runtime
 
+Project notes (commands, files to leave unchanged, slow or expensive operations)
+belong in the root AGENTS.md after the CAFEKIT CORE END marker; Codex reads
+AGENTS.md directly.
+
 - Repository instructions live in `AGENTS.md`.
 - CafeKit skills live in `.agents/skills/`; invoke them as `$cf-<name>` or browse with `/skills`. Edit skills in the project, not in a global skills directory.
 - Run Python skill scripts with the project venv:
@@ -7,6 +11,10 @@
   - Windows: `.agents\\skills\\.venv\\Scripts\\python.exe scripts\\<script>.py`
 - CafeKit agents live in `.codex/agents/*.toml` and are auto-discovered after the repository is trusted.
 - Runtime support lives in `.codex/rules/`, `.codex/scripts/`, `.codex/references/`, and `.codex/runtime.json`.
+- Read `.codex/rules/workflow.md` before planning or implementing changes.
+- Follow `.codex/rules/ai-dev-rules.md` while writing or reviewing code.
+- Consult `.codex/rules/orchestrator.md` when delegating work or seeking specialist counsel.
+- Read `.codex/rules/manage-docs.md` when updating project documentation.
 - For skill selection, read `.codex/rules/skill-workflow-routing.md` and
   `.codex/rules/skill-domain-routing.md`. When capability presence is uncertain,
   run `node .codex/scripts/generate-skill-catalog.cjs --skills`; its Codex-bound

package/src/codex/hooks/ask-guard.cjs

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+'use strict';
+
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { atomicWrite, getHookContext, logCrash, readPayload } = require('./lib/hook-context.cjs');
+
+const sha256 = (value) => crypto.createHash('sha256').update(value).digest('hex');
+
+try {
+  const data = readPayload();
+  if (!['UserPromptSubmit', 'PreToolUse'].includes(data.hook_event_name)) process.exit(0);
+  if (typeof data.session_id !== 'string' || !data.session_id.trim()) {
+    throw new Error('missing session ID');
+  }
+  const { projectRoot } = getHookContext(data);
+  const sessionHash = sha256(data.session_id);
+  const root = process.env.CAFEKIT_ASK_GUARD_DIR
+    || path.join(os.tmpdir(), 'cafekit-ask-guard', sha256(projectRoot));
+  const directory = path.join(path.resolve(root), sessionHash);
+  const flag = path.join(directory, 'state.json');
+
+  if (data.hook_event_name === 'UserPromptSubmit') {
+    const active = /^(\$cf-ask|\/cf:ask)(?=\s|$)/.test(String(data.prompt || '').trim());
+    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    atomicWrite(flag, `${JSON.stringify({ active })}\n`);
+    process.exit(0);
+  }
+  // The live probe exposed this native edit separately from its enclosing exec.
+  // Shell commands and child sessions are outside this guard's scope.
+  if (data.tool_name !== 'apply_patch') process.exit(0);
+  let state;
+  try {
+    state = JSON.parse(fs.readFileSync(flag, 'utf8'));
+  } catch (error) {
+    if (error.code === 'ENOENT') process.exit(0);
+    throw error;
+  }
+  if (typeof state?.active !== 'boolean') throw new Error('invalid session flag');
+  if (!state.active) process.exit(0);
+
+  fs.appendFileSync(path.join(directory, 'denials.jsonl'), `${JSON.stringify({
+    timestamp: new Date().toISOString(),
+    session_id_sha256: sessionHash,
+    tool_name: 'apply_patch'
+  })}\n`, { mode: 0o600 });
+  process.stderr.write('This ask session answers only. Run $cf-fix to change files.\n');
+  process.exit(2);
+} catch {
+  // Do not log exception text: malformed payloads can contain private input.
+  logCrash('ask-guard', new Error('Ask guard could not read or persist session state; allowing the call.'));
+}

package/src/codex/hooks/inspect-block.cjs

@@ -2,13 +2,14 @@
 'use strict';
 
 const {
-  getHookContext,
+  PROJECT_ROOT,
   logCrash,
-  readPayload
+  readPayload,
+  readRuntime,
+  resolveSessionCwd
 } = require('./lib/hook-context.cjs');
-const { BLOCKED_DIRS, inspectInput } = require('./lib/inspect-paths.cjs');
 
-function denyPath(requested, blocked) {
+function denyPath(requested, blocked, BLOCKED_DIRS) {
   process.stderr.write(
     `SCOPE LIMIT EXCEEDED: Directory "${blocked}/" is explicitly forbidden\n`
     + `Requested Path: ${requested}\n`
@@ -18,12 +19,15 @@ function denyPath(requested, blocked) {
 }
 
 try {
+  const { BLOCKED_DIRS, inspectInput } = require('./lib/inspect-paths.cjs');
   const payload = readPayload();
   if (!payload) process.exit(0);
-  const { runtime } = getHookContext(payload);
+  const projectRoot = PROJECT_ROOT;
+  const runtime = readRuntime(PROJECT_ROOT);
+  const sessionCwd = resolveSessionCwd(payload);
   if (runtime.scout?.enabled === false || runtime.inspect?.enabled === false) process.exit(0);
 
-  const result = inspectInput(payload.tool_input || {});
+  const result = inspectInput(payload.tool_name || '', payload.tool_input || {}, { cwd: sessionCwd, projectRoot });
   if (result.broadGlob) {
     process.stderr.write(
       `SCOPE LIMIT EXCEEDED: Glob pattern is excessively broad\n`
@@ -33,7 +37,7 @@ try {
     process.exit(2);
   }
   if (result.blockedPath) {
-    denyPath(result.blockedPath.requested, result.blockedPath.blocked);
+    denyPath(result.blockedPath.requested, result.blockedPath.blocked, BLOCKED_DIRS);
   }
 } catch (error) {
   logCrash('inspect-block', error);

package/src/codex/hooks/lib/inspect-paths.cjs

@@ -1,199 +1 @@
-'use strict';
-
-const BLOCKED_DIRS = new Set([
-  'node_modules', 'dist', 'build', '.next', '.nuxt', '.output',
-  '__pycache__', '.venv', 'venv', 'vendor', 'target',
-  '.git', 'coverage', '.nyc_output'
-]);
-const BROAD_GLOBS = [/^\*\*\/\*$/, /^\*\*\.\w+$/, /^\*\*\/\*\.\w+$/];
-const PATH_KEYS = new RegExp(
-  '^(?:file_?paths?|paths?|search_?paths?|'
-  + '(?:source|target|destination)_?paths?|dirs?|director(?:y|ies)|'
-  + 'folders?|cwd|root|locations?|uris?)$',
-  'i'
-);
-const GLOB_KEYS = /(?:^|_)(?:glob|globs|pattern|patterns)$/i;
-function clean(value) {
-  return String(value || '').trim().replace(/^['"`]+|['"`,:]+$/g, '');
-}
-function blockedSegment(value) {
-  return clean(value)
-    .replace(/\\/g, '/')
-    .split('/')
-    .find((segment) => BLOCKED_DIRS.has(segment));
-}
-function isBroadGlob(value) {
-  const candidate = clean(value);
-  return BROAD_GLOBS.some((rule) => rule.test(candidate));
-}
-function collectStructured(value, key, paths, globs) {
-  if (typeof value === 'string') {
-    if (PATH_KEYS.test(key)) paths.push(value);
-    if (GLOB_KEYS.test(key)) globs.push(value);
-    return;
-  }
-  if (Array.isArray(value)) {
-    if (PATH_KEYS.test(key)) paths.push(...value.filter((item) => typeof item === 'string'));
-    if (GLOB_KEYS.test(key)) globs.push(...value.filter((item) => typeof item === 'string'));
-    for (const item of value) collectStructured(item, '', paths, globs);
-    return;
-  }
-  if (!value || typeof value !== 'object') return;
-  for (const [childKey, child] of Object.entries(value)) {
-    collectStructured(child, childKey, paths, globs);
-  }
-}
-function shellTokens(command) {
-  const tokens = [];
-  let token = '';
-  let quote = '';
-  for (let index = 0; index < command.length; index += 1) {
-    const char = command[index];
-    if (quote) {
-      if (char === quote) quote = '';
-      else if (char === '\\' && quote === '"' && index + 1 < command.length) {
-        token += command[index += 1];
-      } else token += char;
-      continue;
-    }
-    if (char === '"' || char === "'") {
-      quote = char;
-    } else if (char === '\n') {
-      if (token) tokens.push(token);
-      token = '';
-      tokens.push('|');
-    } else if (/\s/.test(char)) {
-      if (token) tokens.push(token);
-      token = '';
-    } else if (';&|'.includes(char)) {
-      if (token) tokens.push(token);
-      token = '';
-      const pair = command.slice(index, index + 2);
-      if (pair === '&&' || pair === '||') index += 1;
-      tokens.push('|');
-    } else {
-      token += char;
-    }
-  }
-  if (token) tokens.push(token);
-  return tokens;
-}
-function commandGroups(command) {
-  const groups = [[]];
-  for (const token of shellTokens(command)) {
-    if (token === '|') groups.push([]);
-    else groups[groups.length - 1].push(clean(token));
-  }
-  return groups.filter((group) => group.length);
-}
-
-function positional(tokens, optionsWithValue = new Set()) {
-  const out = [];
-  for (let index = 1; index < tokens.length; index += 1) {
-    const token = tokens[index];
-    if (optionsWithValue.has(token)) index += 1;
-    else if (!token.startsWith('-') || token === '-') out.push(token);
-  }
-  return out;
-}
-
-function readerOptionPaths(name, tokens) {
-  if (!['rg', 'grep', 'sed'].includes(name)) return [];
-  const paths = [];
-  for (let index = 1; index < tokens.length; index += 1) {
-    const token = tokens[index];
-    if (token === '-f' || token === '--file') {
-      if (tokens[index + 1]) paths.push(tokens[index + 1]);
-      index += 1;
-    } else if (token.startsWith('--file=')) {
-      paths.push(token.slice('--file='.length));
-    }
-  }
-  return paths;
-}
-
-function findRoots(tokens) {
-  const roots = [];
-  let index = 1;
-  while (['-H', '-L', '-P'].includes(tokens[index]) || /^-O\d+$/.test(tokens[index] || '')) {
-    index += 1;
-  }
-  if (tokens[index] === '-D') index += 2;
-  if (tokens[index] === '--') index += 1;
-  for (; index < tokens.length; index += 1) {
-    const token = tokens[index];
-    if (token.startsWith('-') || ['!', '(', ')'].includes(token)) break;
-    roots.push(token);
-  }
-  return roots;
-}
-
-function commandPaths(group, globs) {
-  const commandIndex = group.findIndex((token) => (
-    token && !/^[A-Za-z_][A-Za-z0-9_]*=/.test(token)
-  ));
-  if (commandIndex < 0) return [];
-  const tokens = group.slice(commandIndex);
-  while (['sudo', 'env', 'time', 'command'].includes(tokens[0])) tokens.shift();
-  if (!tokens.length) return [];
-  const name = tokens[0].replace(/\\/g, '/').split('/').pop();
-  const optionPaths = readerOptionPaths(name, tokens);
-
-  for (let index = 1; index < tokens.length; index += 1) {
-    const token = tokens[index];
-    if (token === '-g' || token === '--glob' || token === '--iglob') {
-      if (tokens[index + 1]) globs.push(tokens[index + 1]);
-    } else if (/^--(?:i?glob)=/.test(token)) {
-      globs.push(token.slice(token.indexOf('=') + 1));
-    }
-  }
-
-  if (name === 'rg' || name === 'grep') {
-    const values = positional(tokens, new Set([
-      '-e', '--regexp', '-f', '--file', '-g', '--glob', '--iglob',
-      '-t', '--type', '-T', '--type-not'
-    ]));
-    const explicitPattern = tokens.some((token) => token === '-e' || token === '--regexp');
-    const fileMode = tokens.includes('--files');
-    return [...optionPaths, ...(explicitPattern || fileMode ? values : values.slice(1))];
-  }
-  if (name === 'sed') {
-    const values = positional(tokens, new Set(['-e', '--expression', '-f', '--file']));
-    const explicitScript = tokens.some((token) => (
-      ['-e', '--expression', '-f', '--file'].includes(token)
-    ));
-    return [...optionPaths, ...(explicitScript ? values : values.slice(1))];
-  }
-  if (name === 'find') return findRoots(tokens);
-  if (['cat', 'head', 'tail', 'ls', 'wc', 'du', 'tree', 'file', 'stat', 'cd', 'pushd', 'source', '.'].includes(name)) {
-    return positional(tokens, new Set(['-n', '--lines', '-c', '--bytes']));
-  }
-  return tokens.filter((token) => (
-    /^(?:\.{0,2}[\\/]|~[\\/])/.test(token)
-    || (token.includes('/') && blockedSegment(token))
-  ));
-}
-
-function inspectInput(input) {
-  const paths = [];
-  const globs = [];
-  collectStructured(input, '', paths, globs);
-  const command = typeof input?.command === 'string'
-    ? input.command
-    : typeof input?.cmd === 'string' ? input.cmd : '';
-  for (const group of commandGroups(command)) {
-    paths.push(...commandPaths(group, globs));
-  }
-  return {
-    broadGlob: globs.find(isBroadGlob),
-    blockedPath: paths.map((requested) => ({
-      requested,
-      blocked: blockedSegment(requested)
-    })).find((result) => result.blocked)
-  };
-}
-
-module.exports = {
-  BLOCKED_DIRS,
-  inspectInput
-};
+module.exports = require('../../../claude/hooks/lib/inspect-paths.cjs');

package/src/codex/hooks/lib/privacy-paths.cjs

@@ -0,0 +1 @@
+module.exports = require('../../../claude/hooks/lib/privacy-paths.cjs');