@hiveku-apps/sync 0.3.0 → 0.3.2

package/README.md

@@ -112,7 +112,8 @@ approval/sandbox config, so the safe-work rules ship as instructions in
 
 > **This vs. the plugin.** For a single account, you can instead install the
 > published [Hiveku Codex plugin](https://github.com/locus2012/hiveku-codex-plugin)
-> once (`codex plugin marketplace add locus2012/hiveku-codex-plugin`) and set
+> once (`codex plugin marketplace add locus2012/hiveku-codex-plugin` then
+> `codex plugin add hiveku@hiveku`) and set
 > `HIVEKU_TOKEN`. `hiveku-sync --codex` is the self-contained, per-account route —
 > better for multi-account / CI / power-user setups, and it also brings the
 > account's own knowledge. Use one route per folder, not both.

package/bin/hiveku-sync.mjs

@@ -84,7 +84,8 @@ Memory/rules/skills:
                                     the latest knowledge. Complements the published
                                     Hiveku Codex plugin (single-account users can
                                     instead run: codex plugin marketplace add
-                                    locus2012/hiveku-codex-plugin).
+                                    locus2012/hiveku-codex-plugin, then:
+                                    codex plugin add hiveku@hiveku).
 
 Coder projects:
   projects                          List the account's coder projects.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hiveku-apps/sync",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Sync a Hiveku account's memory/rules/skills + coder projects into a local folder, and ship projects (push/deploy/pull-env) from the terminal. Pairs with the Hiveku MCP at core.hiveku.com/mcp so Claude Code can drive Hiveku tools per-folder.",
   "type": "module",
   "license": "MIT",

package/src/codex.mjs

@@ -33,7 +33,7 @@ import { existsSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join, resolve, dirname } from 'node:path';
 
-import { loadDotenv } from './util.mjs';
+import { loadDotenv, safeSlug } from './util.mjs';
 
 const AGENTS_BEGIN = '<!-- hiveku:begin -->';
 const AGENTS_END = '<!-- hiveku:end -->';
@@ -100,10 +100,15 @@ function codexTomlRegion({ baseUrl, profile, apiKey }) {
   const auth = apiKey
     ? `http_headers = { "Authorization" = "Bearer ${apiKey}" }`
     : `bearer_token_env_var = "OLYMPUS_API_KEY"`;
+  // default_tools_approval_mode = "approve": this folder exists so the agent
+  // can operate the account — per-call approval prompts would also auto-cancel
+  // every tool call in headless `codex exec` (CI/cron), this lane's core use.
+  // (Enum is approve|prompt; the docs' "auto" is not accepted by codex 0.131.)
   return `${TOML_BEGIN}
 [mcp_servers.hiveku]
 url = "${url}"
 ${auth}
+default_tools_approval_mode = "approve"
 
 [mcp_servers.playwright]
 command = "npx"
@@ -138,21 +143,26 @@ export async function mirrorKnowledgeToSkills(folder) {
   for (const srcDir of ['skills', 'commands']) {
     const root = join(folder, srcDir);
     if (!existsSync(root)) continue;
-    // pull writes <type>/<department>/<slug>.md — walk one level of subdirs + top-level files.
+    // pull writes FLAT <type>/<slug>.md (department lives in the frontmatter,
+    // not the path) — but tolerate one level of hand-made subdirs too. Nested
+    // entries are isFile-checked so a directory named `x.md` can't crash us.
     const files = [];
     for (const entry of await readdir(root, { withFileTypes: true })) {
       if (entry.isDirectory()) {
-        for (const f of await readdir(join(root, entry.name))) {
-          if (f.endsWith('.md')) files.push(join(root, entry.name, f));
+        for (const sub of await readdir(join(root, entry.name), { withFileTypes: true })) {
+          if (sub.isFile() && sub.name.endsWith('.md')) files.push(join(root, entry.name, sub.name));
         }
-      } else if (entry.name.endsWith('.md')) {
+      } else if (entry.isFile() && entry.name.endsWith('.md')) {
         files.push(join(root, entry.name));
       }
     }
     for (const filePath of files) {
       const src = await readFile(filePath, 'utf8');
       const base = filePath.split('/').pop().replace(/\.md$/, '');
-      const name = `hiveku-${srcDir === 'commands' ? 'cmd' : 'skill'}-${base}`.slice(0, 100);
+      // safeSlug: pull-written names are already slugs, but a hand-authored
+      // file like "My notes: draft.md" must not produce invalid YAML or an
+      // invalid skill dir name.
+      const name = `hiveku-${srcDir === 'commands' ? 'cmd' : 'skill'}-${safeSlug(base)}`.slice(0, 100);
       let description = `Hiveku ${srcDir === 'commands' ? 'command' : 'skill'}: ${base}`;
       let body = src;
       const fm = src.match(/^---\n([\s\S]*?)\n---\n?/);
@@ -186,10 +196,14 @@ export async function mirrorKnowledgeToSkills(folder) {
  * MCP auth when possible.
  */
 export async function writeCodexScaffold({ folder, slug, baseUrl, profile }) {
+  // The FOLDER's .env wins over a process-level export: folder = tenant
+  // boundary, and a globally exported key for account A must never get
+  // inlined into account B's config during a retrofit. process.env is only a
+  // fallback for folders that keep no .env at all.
   const dotenv = await loadDotenv(join(folder, '.env'));
-  const apiKey =
-    process.env.OLYMPUS_API_KEY ||
-    (dotenv.OLYMPUS_API_KEY && dotenv.OLYMPUS_API_KEY !== 'olp_replace_me' ? dotenv.OLYMPUS_API_KEY : '');
+  const dotenvKey =
+    dotenv.OLYMPUS_API_KEY && dotenv.OLYMPUS_API_KEY !== 'olp_replace_me' ? dotenv.OLYMPUS_API_KEY : '';
+  const apiKey = dotenvKey || (existsSync(join(folder, '.env')) ? '' : process.env.OLYMPUS_API_KEY || '');
 
   // AGENTS.md (marker-managed)
   const agentsPath = join(folder, 'AGENTS.md');
@@ -212,7 +226,14 @@ export async function writeCodexScaffold({ folder, slug, baseUrl, profile }) {
   await mkdir(dirname(tomlPath), { recursive: true });
   await writeFile(tomlPath, upsertMarkedRegion(toml, TOML_BEGIN, TOML_END, codexTomlRegion({ baseUrl, profile, apiKey })), 'utf8');
 
-  await appendGitignoreLines(folder, ['.codex/config.toml']);
+  // Gitignore EVERY credential-bearing file this lane depends on — not just the
+  // one we write. The retrofit reads .env for OLYMPUS_API_KEY to inline it, so a
+  // folder that had no .gitignore would otherwise end up with one that ignores
+  // .codex/config.toml while leaving the key-bearing .env tracked. (The breach
+  // entry point was a leaked credential; a scaffolder must never leave one
+  // git-trackable.) runInit already covers .env for fresh folders; this makes
+  // the retrofit path equally safe.
+  await appendGitignoreLines(folder, ['.codex/config.toml', '.env', '.env.local', '.hiveku/']);
 
   const skills = await mirrorKnowledgeToSkills(folder);
   return { inlinedKey: !!apiKey, skillsMirrored: skills };