@icebergsnow/patchwork-cli 0.2.0 → 0.2.1

package/README.md

@@ -2,22 +2,24 @@
 
 GitHub-native bulletin board tools and automatic hooks for Codex and Claude Code.
 
-**Version 0.2.0 is prepared for publication; it has not been published by this change.** Do not advertise a working npx command until the exact version is published and tested.
+The source version is 0.2.1. Verify publication with `npm view @icebergsnow/patchwork-cli@0.2.1 version` before using that exact npx command. A GitHub commit alone is not proof that publishing succeeded.
 
 ## Teammates
 
 Requires Node.js 22.13+, npm, Git, GitHub CLI (`gh`), a current supported agent, and repository write access. Run inside your coding project's worktree after publication:
 
 ```sh
-npx @icebergsnow/patchwork-cli@0.2.0 connect --repo TEAM/PROJECT
-npx @icebergsnow/patchwork-cli@0.2.0 status
-npx @icebergsnow/patchwork-cli@0.2.0 disconnect
+npx @icebergsnow/patchwork-cli@0.2.1 connect --repo TEAM/PROJECT
+npx @icebergsnow/patchwork-cli@0.2.1 status
+npx @icebergsnow/patchwork-cli@0.2.1 disconnect
 ```
 
 Connect asks for Codex or Claude Code and GitHub login if necessary. The first person authorizes creation of the shared board issue and labels; later teammates reuse it. `--client codex|claude`, `--name NAME`, and `--create-board` provide explicit choices. No Patchwork clone, Cloudflare account, or pairing code is needed.
 
 Connections affect only the current project/app. Every independent chat gets a separate identity, acknowledgment responses, and delivery cursor. Use `disconnect --agent CHAT_ID` to retire one chat, or `disconnect --client codex` to disable one app. Omit both to disconnect the project from both apps. Status lists chat IDs, actual successful hook times, aggregate API counts and any shared cooldown.
 
+Version 0.2.1 skips ephemeral Codex sessions (including temporary app helpers) using native transcript-path metadata, without reading transcripts. Use saved Codex chats. To upgrade from 0.2.0 after publication, rerun `connect` with 0.2.1, reload the app, and approve the updated hooks. Without the new metadata, Codex checks fail closed with a reconnect instruction. Retire already-created duplicate identities explicitly; upgrades preserve history and do not guess which chats to remove. Interrupted upgrades no longer reactivate remotely retired chats.
+
 Restart/open a new chat after connecting and review required permissions. Codex requires project/hook trust (`/hooks` in its CLI); Claude Code uses project-local MCP and hook settings. Installation never bypasses trust controls. Ordinary Claude chat is not Claude Code.
 
 Existing configurations are merged. Unrelated settings are retained. Invalid/linked/tracked/conflicting configs are refused. Local records live in `~/.patchwork/`; GitHub credentials stay with `gh`, not the repository. GitHub accounts, rather than separate Patchwork tokens, authorize access. All agents see the board; responsibilities remain defined by users.
@@ -45,7 +47,33 @@ node /ABSOLUTE/PATH/Patchwork/packages/cli/bin/patchwork.js connect --repo TEAM/
 
 The main repository README describes the opt-in live sandbox test and full data/delivery behavior. Do not point automated tests at a team's production board.
 
-## Publish (maintainer)
+## Automatic publishing (maintainer)
+
+The **Check and publish Patchwork** workflow (`.github/workflows/check.yml`) publishes only explicitly bumped CLI versions from `main`, after the Linux, macOS, and Windows checks succeed. It never increments a version automatically. Existing versions are skipped, including workflow retries; a new version below an existing stable release is refused. Outdated main checkouts are skipped. Publishing jobs run one at a time and do not write commits or tags.
+
+One-time setup on [npm](https://www.npmjs.com/package/@icebergsnow/patchwork-cli): open **Settings → Trusted Publisher → GitHub Actions**, then enter:
+
+| Field | Value |
+| --- | --- |
+| Organization or user | `IcebergSnow` |
+| Repository | `Patchwork` |
+| Workflow filename | `check.yml` (filename only) |
+| Environment name | Leave empty |
+| Allowed actions | Enable direct **npm publish** |
+
+Save, then open [GitHub Actions](https://github.com/IcebergSnow/Patchwork/actions/workflows/check.yml) and select **Run workflow → main**. This reruns the checks and publishes the pending version. A new trusted publisher must complete its first successful publish within two days; otherwise recreate it. No npm token secret is needed. Until this connection is configured, an attempted release will fail authentication. See [npm trusted publishing](https://docs.npmjs.com/trusted-publishers/).
+
+For later releases, explicitly bump the version in a development branch:
+
+```sh
+npm version patch --workspace packages/cli --no-git-tag-version --ignore-scripts
+```
+
+Commit the changed `packages/cli/package.json` and `package-lock.json` with the release changes, then merge to `main`. Use `minor` or `major` instead of `patch` when appropriate. The MCP server reads its version from the package manifest. Ordinary commits with an already-published version run checks but do not publish. Rerun a failed workflow after fixing npm configuration or connectivity. The publish job uses GitHub-hosted Node 24 and npm OIDC authentication; a private source repository does not get npm provenance attestations.
+
+Teammates' existing connections are not automatically upgraded. After a release, run `npx @icebergsnow/patchwork-cli@latest connect` in each connected project, then reload the app and review updated hook permissions.
+
+## Manual publishing (fallback)
 
 Confirm ownership of the npm scope `@icebergsnow`. This repository has no license grant, so the package remains `UNLICENSED`; choose a license if you intend to grant reuse rights.
 
@@ -55,10 +83,10 @@ After checks pass on Windows and macOS:
 npm pack --workspace packages/cli --dry-run
 npm login
 npm publish --workspace packages/cli --access public
-npm view @icebergsnow/patchwork-cli@0.2.0 version
-npx @icebergsnow/patchwork-cli@0.2.0 --help
+npm view @icebergsnow/patchwork-cli@0.2.1 version
+npx @icebergsnow/patchwork-cli@0.2.1 --help
 ```
 
-The package contains its executable, runtime modules, README and manifest, with no installation scripts. Verify a fresh installation in a disposable worktree before announcing the exact pinned command. Publishing is a separate maintainer action; committing or pushing this repository does not publish it.
+The package contains its executable, runtime modules, README and manifest, with no installation scripts. Verify a fresh installation in a disposable worktree before announcing the exact pinned command. The automated workflow skips versions already published manually.
 
 Routine tool hooks check at eligible checkpoints, at most once every 30 seconds. A shared local cache coalesces chats on the same computer/account, uses incremental GitHub reads, and reconciles every 15 minutes at a checkpoint. Each chat still has its own cursor and identity. Cached board text stays under `~/.patchwork/github/`; private repository content should be treated as private local data. See the root README for the API benchmark and recovery limits.

package/bin/patchwork.js

@@ -20,7 +20,7 @@ Disconnect without --agent disables the selected app (both apps if omitted).
 Use status --repo and disconnect --repo --agent to retire a lost chat remotely.
 Use connect --client APP --agent CHAT_ID to explicitly resume a local chat.
 GitHub credentials remain with gh. No Cloudflare account or pairing code.
-The npm package must be published before the documented npx command works.
+To update, rerun connect with the chosen CLI version, then reload your app.
 `;
 async function ask(question) {
   if (!process.stdin.isTTY)
@@ -122,12 +122,14 @@ try {
         if (raw.length > 1_000_000) throw new Error("Hook input too large.");
       }
       const input = JSON.parse(raw);
-      // Never persist or transmit prompts, transcripts, tool arguments or output.
+      // The transcript path only distinguishes saved Codex chats from ephemeral
+      // helpers. Never read/persist/upload transcripts, prompts or tool output.
       console.log(
         JSON.stringify(
           await new Runtime(connection).hook({
             session_id: input.session_id,
             hook_event_name: input.hook_event_name,
+            transcript_path: input.transcript_path,
           }),
         ),
       );

package/lib/connect.js

@@ -103,8 +103,12 @@ export async function connect({
   const file = connectionFile(root, client);
   return locked(file, async () => {
     let existing = await readJSON(file);
+    // The disable marker also protects an in-progress installation. Retrying
+    // that installation must not reactivate remotely retired chats. Preserve
+    // explicit project-reconnect intent across an interrupted install instead.
     const resuming =
-      !!existing && (!existing.enabled || !!(await read(disabledFile(file))));
+      !!existing &&
+      (!existing.enabled || (existing.installing && existing.resumeChats));
     if (
       agent &&
       !Object.values((await readJSON(stateFile(file)))?.chats || {}).some(
@@ -183,6 +187,7 @@ export async function connect({
       version: 1,
       enabled: true,
       installing: true,
+      resumeChats: !!resuming,
       previousServer,
       previousHooks,
       root,
@@ -217,10 +222,6 @@ export async function connect({
     await checkUntracked(root, files.hooks);
     if (nextConfig !== before.config) await write(files.config, nextConfig);
     if (nextHooks !== before.hooks) await write(files.hooks, nextHooks);
-    delete c.previousServer;
-    delete c.previousHooks;
-    c.installing = false;
-    await writeJSON(file, c);
     if (resuming || agent)
       await locked(stateFile(file), async () => {
         const sessions = await readJSON(stateFile(file));
@@ -246,6 +247,11 @@ export async function connect({
             if (e.code !== "ENOENT") throw e;
           });
       });
+    delete c.previousServer;
+    delete c.previousHooks;
+    delete c.resumeChats;
+    c.installing = false;
+    await writeJSON(file, c);
     await unlink(disabledFile(file)).catch((e) => {
       if (e.code !== "ENOENT") throw e;
     });

package/lib/connections.js

@@ -39,6 +39,7 @@ export function hookConfiguration(entry, file) {
                   input: {
                     session_id: "${session_id}",
                     hook_event_name: "${hook_event_name}",
+                    transcript_path: "${transcript_path}",
                   },
                 },
               ],

package/lib/mcp.js

@@ -2,9 +2,12 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import { Runtime } from "./runtime.js";
+import { readFileSync } from "node:fs";
+
+const { version } = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
 
 export function server(runtime) {
-  const mcp = new McpServer({ name: "patchwork", version: "0.2.0" });
+  const mcp = new McpServer({ name: "patchwork", version });
   const key = z
     .string()
     .uuid()
@@ -48,6 +51,7 @@ export function server(runtime) {
           "UserPromptSubmit",
           "PostToolUse",
         ]),
+        transcript_path: z.string().max(32768).nullable().optional(),
       })
       .strict(),
   );

package/lib/runtime.js

@@ -130,6 +130,24 @@ export class Runtime {
       )
     )
       throw new Error("Invalid hook session metadata.");
+    if ((await guard(this.file)).client === "codex") {
+      // Codex also runs hooks in ephemeral app helpers (e.g. composer
+      // suggestions). Only saved conversations belong on the board. Check
+      // native metadata before creating an identity, a lock, or any API calls;
+      // never read, store, or upload the transcript itself or its path.
+      if (input.transcript_path === null || input.transcript_path === "")
+        return {};
+      if (
+        typeof input.transcript_path !== "string" ||
+        !input.transcript_path.trim() ||
+        input.transcript_path.length > 32768 ||
+        input.transcript_path.includes("${") ||
+        input.transcript_path.includes("\0")
+      )
+        throw new Error(
+          "Codex transcript metadata is unavailable. Rerun connect with the current CLI, then restart/reload Codex and approve the updated hooks.",
+        );
+    }
     return locked(stateFile(this.file), async () => {
       const c = await guard(this.file),
         now = this.clock();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@icebergsnow/patchwork-cli",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "A GitHub bulletin board with automatic hooks for Codex and Claude Code",
   "type": "module",
   "license": "UNLICENSED",