@ken-jo/agent-connector 0.1.0 → 0.2.0

package/dist/{codex-JFQTS6LU.js → codex-4BY2ZJIW.js}

@@ -7,13 +7,14 @@ import {
 } from "./chunk-DBQMX75U.js";
 import {
   BaseAdapter
-} from "./chunk-TIIP3RG2.js";
+} from "./chunk-PD4VFEBY.js";
 import "./chunk-7L6ITC4T.js";
 import {
   buildHomeBinHookCommand,
   buildServeWrapperCommand,
   shouldWrapForTelemetry
 } from "./chunk-MEH7GC7R.js";
+import "./chunk-N6HH7K6P.js";
 import {
   ensureDir
 } from "./chunk-TRQKHP7D.js";
@@ -29,14 +30,21 @@ var CODEX_HOOK_EVENTS = [
   "PostToolUse",
   "PreCompact",
   "UserPromptSubmit",
-  "Stop"
+  "Stop",
+  "PermissionRequest",
+  "SubagentStart",
+  "SubagentStop"
 ];
+var WARN_SKIP_EVENTS = /* @__PURE__ */ new Set(["PostToolUseFailure"]);
 var PRE_TOOL_USE_MATCHER = "local_shell|shell|shell_command|exec_command|Bash|Shell|apply_patch|Edit|Write|grep_files|mcp__";
 var CodexAdapter = class extends BaseAdapter {
   id = "codex";
   name = "Codex CLI";
   paradigm = "json-stdio";
   capabilities = {
+    // Memory surface: AGENTS.md-first managed block. memoryTargets below probes
+    // AGENTS.override.md first (it shadows AGENTS.md per directory on codex).
+    supportsMemory: true,
     preToolUse: true,
     postToolUse: true,
     preCompact: true,
@@ -45,6 +53,12 @@ var CodexAdapter = class extends BaseAdapter {
     userPromptSubmit: true,
     stop: true,
     notification: false,
+    // E1 events: PermissionRequest (decision-capable) + SubagentStart/Stop are
+    // Codex-native. postToolUseFailure stays unset — Codex has no failure event,
+    // so a declared hook for it warn-skips at install.
+    permissionRequest: true,
+    subagentStart: true,
+    subagentStop: true,
     canModifyArgs: false,
     canModifyOutput: false,
     canInjectSessionContext: true,
@@ -91,6 +105,34 @@ var CodexAdapter = class extends BaseAdapter {
   getHookConfigPath(ctx) {
     return join(this.getConfigDir(ctx), "hooks.json");
   }
+  // ── Memory surface: AGENTS.override.md probe + 32 KiB doc-cap budget ─────
+  // Codex reads AGENTS.override.md > AGENTS.md per directory (one file per
+  // directory), so when the override file exists OUR block must live there or
+  // it is never loaded. Combined project docs are capped at 32 KiB
+  // (`project_doc_max_bytes`), hence the ~28 KiB per-file budget warn.
+  memoryTargets(ctx) {
+    if (this.memoryOverride(ctx)?.path) return super.memoryTargets(ctx);
+    if (ctx.scope !== "project" && ctx.scope !== "user") return [];
+    const budgetBytes = 28 * 1024;
+    const dir = ctx.scope === "project" ? ctx.projectDir : this.userConfigDir();
+    const overrideMd = join(dir, "AGENTS.override.md");
+    if (existsSync(overrideMd)) {
+      return [
+        {
+          path: overrideMd,
+          reason: "AGENTS.override.md shadows AGENTS.md on codex (one doc per directory)",
+          budgetBytes
+        }
+      ];
+    }
+    return [
+      {
+        path: join(dir, "AGENTS.md"),
+        reason: ctx.scope === "project" ? "AGENTS.md standard (project root; codex is the format's originator)" : "codex global guidance ($CODEX_HOME/AGENTS.md)",
+        budgetBytes
+      }
+    ];
+  }
   /** `$CODEX_HOME` || `~/.codex` for user scope. */
   userConfigDir() {
     const env = process.env.CODEX_HOME;
@@ -173,12 +215,21 @@ var CodexAdapter = class extends BaseAdapter {
     const { connector, dryRun } = ctx;
     const path = this.getHookConfigPath(ctx);
     const events = this.effectiveHookEvents(ctx);
-    if (events.length === 0) {
+    const dropped = this.warnSkipHookEvents(ctx);
+    if (events.length === 0 && dropped.length === 0) {
       return [{ platform: this.id, action: "skip", path, detail: "no hooks declared" }];
     }
     const file = this.readHooksFile(path);
     const hooks = file.hooks ??= {};
     const changes = [];
+    for (const event of dropped) {
+      changes.push({
+        platform: this.id,
+        action: "warn",
+        path,
+        detail: `${event} has no Codex hook equivalent \u2014 skipped`
+      });
+    }
     for (const event of events) {
       const desired = this.renderHookEntry(ctx, event);
       const list = Array.isArray(hooks[event]) ? hooks[event] : hooks[event] = [];
@@ -193,7 +244,7 @@ var CodexAdapter = class extends BaseAdapter {
         changes.push({ platform: this.id, action: "skip", path, detail: `hooks.${event}` });
       }
     }
-    if (changes.some((c) => c.action !== "skip")) {
+    if (changes.some((c) => c.action === "create" || c.action === "update")) {
       this.writeJson(path, file, dryRun);
     }
     return changes;
@@ -235,6 +286,9 @@ var CodexAdapter = class extends BaseAdapter {
       {
         name: `${this.name}: mcp_servers.${id} registered`,
         check: () => {
+          if (!ctx.connector.server) {
+            return { status: "OK", detail: "no MCP server declared" };
+          }
           const cfg = this.readToml(path);
           const bucket = cfg["mcp_servers"];
           const present = typeof bucket === "object" && bucket !== null && id in bucket;
@@ -465,9 +519,80 @@ var CodexAdapter = class extends BaseAdapter {
         return { ...base, stopHookActive: input.stop_hook_active ?? false };
       case "Notification":
         return { ...base, message: input.message ?? "" };
+      case "PermissionRequest":
+        return {
+          ...base,
+          toolName: input.tool_name ?? "",
+          toolInput: input.tool_input ?? {}
+        };
+      case "PostToolUseFailure":
+        return {
+          ...base,
+          toolName: input.tool_name ?? "",
+          toolInput: input.tool_input ?? {},
+          error: input.error ?? ""
+        };
+      case "SubagentStart":
+        return {
+          ...base,
+          ...typeof input.agent_id === "string" ? { agentId: input.agent_id } : {},
+          ...typeof input.agent_type === "string" ? { agentType: input.agent_type } : {}
+        };
+      case "SubagentStop":
+        return {
+          ...base,
+          ...typeof input.agent_id === "string" ? { agentId: input.agent_id } : {},
+          ...typeof input.agent_type === "string" ? { agentType: input.agent_type } : {},
+          ...typeof input.agent_transcript_path === "string" ? { agentTranscriptPath: input.agent_transcript_path } : {},
+          ...typeof input.last_assistant_message === "string" ? { lastAssistantMessage: input.last_assistant_message } : {},
+          ...typeof input.stop_hook_active === "boolean" ? { stopHookActive: input.stop_hook_active } : {}
+        };
     }
   }
   formatReply(event, response) {
+    if (event === "PermissionRequest") {
+      if (response.decision === "deny") {
+        return {
+          exitCode: 0,
+          stdout: JSON.stringify({
+            hookSpecificOutput: {
+              hookEventName: "PermissionRequest",
+              decision: {
+                behavior: "deny",
+                message: response.reason ?? "Blocked by hook"
+              }
+            }
+          })
+        };
+      }
+      if (response.decision === "allow") {
+        return {
+          exitCode: 0,
+          stdout: JSON.stringify({
+            hookSpecificOutput: {
+              hookEventName: "PermissionRequest",
+              decision: { behavior: "allow" }
+            }
+          })
+        };
+      }
+      return { exitCode: 0 };
+    }
+    if (event === "SubagentStart") {
+      const context = response.decision === "context" ? response.additionalContext : response.decision === "deny" ? response.reason ?? response.additionalContext : void 0;
+      if (context) {
+        return {
+          exitCode: 0,
+          stdout: JSON.stringify({
+            hookSpecificOutput: {
+              hookEventName: "SubagentStart",
+              additionalContext: context
+            }
+          })
+        };
+      }
+      return { exitCode: 0 };
+    }
     if (response.decision === "deny") {
       if (event === "PreToolUse") {
         return {
@@ -481,6 +606,15 @@ var CodexAdapter = class extends BaseAdapter {
           })
         };
       }
+      if (event === "SubagentStop") {
+        return {
+          exitCode: 0,
+          stdout: JSON.stringify({
+            decision: "block",
+            reason: response.reason ?? "Blocked by hook"
+          })
+        };
+      }
       return { exitCode: 0 };
     }
     if (response.additionalContext && (event === "SessionStart" || event === "PostToolUse")) {
@@ -511,6 +645,12 @@ var CodexAdapter = class extends BaseAdapter {
     if (override === false) return [];
     return CODEX_HOOK_EVENTS.filter((e) => ctx.connector.hookEvents.includes(e));
   }
+  /** Declared events Codex has no analog for — install reports a warn-skip. */
+  warnSkipHookEvents(ctx) {
+    const override = ctx.connector.platforms[this.id]?.hooks;
+    if (override === false) return [];
+    return ctx.connector.hookEvents.filter((e) => WARN_SKIP_EVENTS.has(e));
+  }
   /**
    * Render the `[mcp_servers.<id>]` table. TOML has NO interpolation, so every
    * `${env:VAR}` is resolved to a literal at install time. The env table is a
@@ -546,8 +686,9 @@ var CodexAdapter = class extends BaseAdapter {
       ctx.connector.id
     );
     const entry = { hooks: [{ type: "command", command }] };
-    if (event === "PreToolUse") entry.matcher = PRE_TOOL_USE_MATCHER;
-    else entry.matcher = "";
+    if (event === "PreToolUse" || event === "PermissionRequest") {
+      entry.matcher = PRE_TOOL_USE_MATCHER;
+    } else entry.matcher = "";
     return entry;
   }
   /** Does this hooks.json entry belong to this connector (by home-bin command)? */
@@ -590,4 +731,4 @@ export {
   adapter,
   codex_default as default
 };
-//# sourceMappingURL=codex-JFQTS6LU.js.map
+//# sourceMappingURL=codex-4BY2ZJIW.js.map

package/dist/codex-4BY2ZJIW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/codex/index.ts"],"sourcesContent":["/**\n * adapters/codex — Codex CLI platform adapter for agent-connector.\n *\n * Codex CLI hook paradigm is \"json-stdio\": the host pipes a JSON payload to a\n * command on stdin and reads JSON/exit-code back — the same wire protocol as\n * Claude Code (PascalCase fields, `hookSpecificOutput` reply wrapper).\n *\n * Two native config files live under the Codex config dir\n * (`$CODEX_HOME` || `~/.codex`, mirrored to `<projectDir>/.codex` for project\n * scope):\n *   - config.toml  → `[mcp_servers.<id>]` MCP registration (TOML, NO native\n *     interpolation, so env-refs are resolved to literals at install time).\n *   - hooks.json   → Claude-compatible hook registration ({ matcher, hooks }).\n *\n * Grounded in context-mode's proven Codex adapter (configs/codex/{config.toml,\n * hooks.json}, src/adapters/codex/*) — exact TOML MCP shape + hook JSON schema.\n *\n * Known Codex limitations (upstream): PreToolUse deny works but updatedInput is\n * not yet honored (openai/codex#18491); PostToolUse updatedMCPToolOutput is\n * parsed-but-unsupported — hence canModifyArgs / canModifyOutput are false.\n *\n * E1 extension events (verified against developers.openai.com/codex/hooks):\n *   - PermissionRequest — native, decision-capable via the nested\n *     hookSpecificOutput.decision{behavior:\"allow\"|\"deny\", message?} envelope.\n *     Codex docs: updatedInput / updatedPermissions / interrupt FAIL CLOSED on\n *     this event, so they are never emitted here.\n *   - SubagentStart — native; hookSpecificOutput.additionalContext is injected\n *     as developer context for the subagent (not blockable).\n *   - SubagentStop — native; the documented continuation shape is the TOP-LEVEL\n *     {\"decision\":\"block\",\"reason\"} (Stop semantics: keeps the subagent going).\n *   - PostToolUseFailure — NO Codex analog (PostToolUse only); declared hooks\n *     for it warn-skip at install and the capability flag stays unset.\n */\n\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nimport TOML from \"@iarna/toml\";\n\nimport type {\n  ChangeRecord,\n  CommandDef,\n  DetectedPlatform,\n  HealthCheck,\n  HookEventName,\n  HookParadigm,\n  HookResponse,\n  PlatformCapabilities,\n  PlatformId,\n  ServerDef,\n  SkillDef,\n  SubagentDef,\n} from \"../../core/types.js\";\nimport { ensureDir } from \"../../core/paths.js\";\nimport { resolveEnvRefsDeep } from \"../../core/interpolate.js\";\nimport { writeTomlString } from \"../../core/toml.js\";\nimport {\n  buildHomeBinHookCommand,\n  buildServeWrapperCommand,\n  shouldWrapForTelemetry,\n} from \"../../core/spawn.js\";\nimport { BaseAdapter } from \"../base.js\";\nimport type {\n  HookReply,\n  InstallContext,\n  MemoryTarget,\n  NormalizedEvent,\n} from \"../spi.js\";\n\n// ─────────────────────────────────────────────────────────────────────────\n// Native shapes\n// ─────────────────────────────────────────────────────────────────────────\n\n/** Raw Codex hook payload (PascalCase event, snake_case fields — Claude-style). */\ninterface CodexHookInput {\n  tool_name?: string;\n  tool_input?: Record<string, unknown>;\n  tool_response?: string;\n  session_id?: string;\n  cwd?: string;\n  hook_event_name?: string;\n  source?: string;\n  prompt?: string;\n  is_error?: boolean;\n  stop_hook_active?: boolean;\n  trigger?: string;\n  message?: string;\n  // PostToolUseFailure-style failure field. Codex has NO failure event today;\n  // parsed defensively only (the Claude-compatible wire would carry it).\n  error?: string;\n  // SubagentStart / SubagentStop (agent_type is the matcher subject).\n  agent_id?: string;\n  agent_type?: string;\n  // SubagentStop only — the subagent's own transcript + final message.\n  agent_transcript_path?: string;\n  last_assistant_message?: string;\n}\n\n/** One hook entry inside hooks.json (Claude-compatible). */\ninterface CodexHookEntry {\n  matcher?: string;\n  hooks: Array<{ type: \"command\"; command: string }>;\n}\n\ninterface CodexHooksFile {\n  hooks?: Record<string, CodexHookEntry[]>;\n  [key: string]: unknown;\n}\n\n/** Rendered `[mcp_servers.<id>]` table — string env table, no interpolation. */\ninterface CodexMcpEntry {\n  command: string;\n  args?: string[];\n  env?: Record<string, string>;\n}\n\n/**\n * Codex hook events agent-connector registers, in the canonical → native order.\n * Codex uses the same PascalCase event names as Claude Code; the home-binary\n * hook command receives the lowercased event token.\n */\nconst CODEX_HOOK_EVENTS = [\n  \"SessionStart\",\n  \"PreToolUse\",\n  \"PostToolUse\",\n  \"PreCompact\",\n  \"UserPromptSubmit\",\n  \"Stop\",\n  \"PermissionRequest\",\n  \"SubagentStart\",\n  \"SubagentStop\",\n] as const;\n\ntype CodexHookEventName = (typeof CODEX_HOOK_EVENTS)[number];\n\n/**\n * Newer canonical events with NO Codex analog: Codex ships PostToolUse only —\n * there is no failure event on the live hooks page. Declared hooks for these\n * warn-skip at install so the degradation is reported, never silent. (The\n * legacy SessionEnd / Notification silent filter predates this convention and\n * is deliberately left untouched.)\n */\nconst WARN_SKIP_EVENTS: ReadonlySet<HookEventName> = new Set([\"PostToolUseFailure\"]);\n\n/**\n * PreToolUse matcher — canonical Codex tool names + bare MCP tool names +\n * external MCP catch-all literal. Charset-clean ([A-Za-z0-9_|] only) so Codex's\n * Rust `regex` exact-matcher short-circuits (no look-around, which Codex\n * rejects at boot). Copied from context-mode's proven matcher.\n */\nconst PRE_TOOL_USE_MATCHER =\n  \"local_shell|shell|shell_command|exec_command|Bash|Shell|apply_patch|Edit|Write|grep_files|mcp__\";\n\n// ─────────────────────────────────────────────────────────────────────────\n// Adapter\n// ─────────────────────────────────────────────────────────────────────────\n\nexport class CodexAdapter extends BaseAdapter {\n  readonly id: PlatformId = \"codex\";\n  readonly name = \"Codex CLI\";\n  readonly paradigm: HookParadigm = \"json-stdio\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: AGENTS.md-first managed block. memoryTargets below probes\n    // AGENTS.override.md first (it shadows AGENTS.md per directory on codex).\n    supportsMemory: true,\n    preToolUse: true,\n    postToolUse: true,\n    preCompact: true,\n    sessionStart: true,\n    sessionEnd: false,\n    userPromptSubmit: true,\n    stop: true,\n    notification: false,\n    // E1 events: PermissionRequest (decision-capable) + SubagentStart/Stop are\n    // Codex-native. postToolUseFailure stays unset — Codex has no failure event,\n    // so a declared hook for it warn-skips at install.\n    permissionRequest: true,\n    subagentStart: true,\n    subagentStop: true,\n    canModifyArgs: false,\n    canModifyOutput: false,\n    canInjectSessionContext: true,\n    transports: [\"stdio\", \"http\"],\n    // Content surfaces: Codex implements all three.\n    //   command  → ~/.codex/prompts/<name>.md   (md+frontmatter, USER SCOPE ONLY)\n    //   skill    → <codexDir>/skills/<name>/SKILL.md (+ resources)\n    //   subagent → <codexDir>/agents/<name>.toml (TOML)\n    supportsCommands: true,\n    supportsSkills: true,\n    supportsSubagents: true,\n  };\n\n  // ── Detection ──────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = this.userConfigDir();\n    const projDir = join(projectDir, \".codex\");\n    const userCfg = join(userDir, \"config.toml\");\n    const projCfg = join(projDir, \"config.toml\");\n\n    const userInstalled = existsSync(userDir) || existsSync(userCfg);\n    const projInstalled = existsSync(projDir) || existsSync(projCfg);\n    const installed = userInstalled || projInstalled;\n    const scope = projInstalled && !userInstalled ? \"project\" : \"user\";\n    const configPath = scope === \"project\" ? projCfg : userCfg;\n\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath,\n      scope,\n      reason: installed\n        ? `Found Codex config dir (${scope})`\n        : `No .codex config dir at ${userDir} or ${projDir}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ───────────────────────────────────────────────────────\n\n  override getConfigDir(ctx: InstallContext): string {\n    if (ctx.scope === \"project\") return join(ctx.projectDir, \".codex\");\n    return this.userConfigDir();\n  }\n\n  override getServerConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"config.toml\");\n  }\n\n  override getHookConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"hooks.json\");\n  }\n\n  // ── Memory surface: AGENTS.override.md probe + 32 KiB doc-cap budget ─────\n  // Codex reads AGENTS.override.md > AGENTS.md per directory (one file per\n  // directory), so when the override file exists OUR block must live there or\n  // it is never loaded. Combined project docs are capped at 32 KiB\n  // (`project_doc_max_bytes`), hence the ~28 KiB per-file budget warn.\n  protected override memoryTargets(ctx: InstallContext): MemoryTarget[] {\n    // An explicit path override keeps the base resolution (escape hatch wins).\n    if (this.memoryOverride(ctx)?.path) return super.memoryTargets(ctx);\n    if (ctx.scope !== \"project\" && ctx.scope !== \"user\") return [];\n    const budgetBytes = 28 * 1024;\n    const dir = ctx.scope === \"project\" ? ctx.projectDir : this.userConfigDir();\n    const overrideMd = join(dir, \"AGENTS.override.md\");\n    if (existsSync(overrideMd)) {\n      return [\n        {\n          path: overrideMd,\n          reason: \"AGENTS.override.md shadows AGENTS.md on codex (one doc per directory)\",\n          budgetBytes,\n        },\n      ];\n    }\n    return [\n      {\n        path: join(dir, \"AGENTS.md\"),\n        reason:\n          ctx.scope === \"project\"\n            ? \"AGENTS.md standard (project root; codex is the format's originator)\"\n            : \"codex global guidance ($CODEX_HOME/AGENTS.md)\",\n        budgetBytes,\n      },\n    ];\n  }\n\n  /** `$CODEX_HOME` || `~/.codex` for user scope. */\n  private userConfigDir(): string {\n    const env = process.env.CODEX_HOME;\n    if (env && env.trim() !== \"\") {\n      if (env.startsWith(\"~\")) {\n        return join(homedir(), env.replace(/^~[/\\\\]?/, \"\"));\n      }\n      return env;\n    }\n    return join(homedir(), \".codex\");\n  }\n\n  // ── TOML config IO (override JSON helpers — config.toml is TOML) ─────────\n\n  private readToml(path: string): Record<string, unknown> {\n    if (!existsSync(path)) return {};\n    try {\n      return TOML.parse(readFileSync(path, \"utf8\")) as Record<string, unknown>;\n    } catch {\n      return {};\n    }\n  }\n\n  private writeToml(path: string, data: Record<string, unknown>, dryRun: boolean): void {\n    if (dryRun) return;\n    ensureDir(dirname(path));\n    // @iarna/toml's stringify type wants its JsonMap; our object is structurally compatible.\n    writeFileSync(path, TOML.stringify(data as never), \"utf8\");\n  }\n\n  // ── Install server (config.toml → [mcp_servers.<id>]) ───────────────────\n\n  override installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector, dryRun } = ctx;\n    const server = this.effectiveServer(ctx);\n    const path = this.getServerConfigPath(ctx);\n\n    if (!server) {\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no server declared\" }];\n    }\n    if (server.transport !== \"stdio\" || !server.command) {\n      // Codex config.toml [mcp_servers] is stdio-only; remote transports skip here.\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          path,\n          detail: `transport \"${server.transport}\" not registrable in config.toml (stdio only)`,\n        },\n      ];\n    }\n\n    const entry = this.renderMcpEntry(ctx, server);\n\n    const cfg = this.readToml(path);\n    const bucket = this.tomlBucket(cfg, \"mcp_servers\");\n    const before = JSON.stringify(bucket[connector.id]);\n    const after = JSON.stringify(entry);\n\n    let action: ChangeRecord[\"action\"];\n    if (before === undefined) action = \"create\";\n    else if (before === after) action = \"skip\";\n    else action = \"update\";\n\n    if (action !== \"skip\") {\n      bucket[connector.id] = entry as unknown as Record<string, unknown>;\n      this.writeToml(path, cfg, dryRun);\n    }\n    return [{ platform: this.id, action, path, detail: `mcp_servers.${connector.id}` }];\n  }\n\n  override uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector, dryRun } = ctx;\n    const path = this.getServerConfigPath(ctx);\n    const cfg = this.readToml(path);\n    const bucket = cfg[\"mcp_servers\"];\n    if (\n      !existsSync(path) ||\n      typeof bucket !== \"object\" ||\n      bucket === null ||\n      !(connector.id in (bucket as Record<string, unknown>))\n    ) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          path,\n          detail: `mcp_servers.${connector.id} absent`,\n        },\n      ];\n    }\n    delete (bucket as Record<string, unknown>)[connector.id];\n    this.writeToml(path, cfg, dryRun);\n    return [{ platform: this.id, action: \"remove\", path, detail: `mcp_servers.${connector.id}` }];\n  }\n\n  // ── Install hooks (hooks.json) ──────────────────────────────────────────\n\n  override installHooks(ctx: InstallContext): ChangeRecord[] {\n    const { connector, dryRun } = ctx;\n    const path = this.getHookConfigPath(ctx);\n    const events = this.effectiveHookEvents(ctx);\n    const dropped = this.warnSkipHookEvents(ctx);\n\n    if (events.length === 0 && dropped.length === 0) {\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no hooks declared\" }];\n    }\n\n    const file = this.readHooksFile(path);\n    const hooks = (file.hooks ??= {});\n    const changes: ChangeRecord[] = [];\n\n    // Declared events Codex cannot fire are reported, never silently dropped.\n    for (const event of dropped) {\n      changes.push({\n        platform: this.id,\n        action: \"warn\",\n        path,\n        detail: `${event} has no Codex hook equivalent — skipped`,\n      });\n    }\n\n    for (const event of events) {\n      const desired = this.renderHookEntry(ctx, event);\n      const list = Array.isArray(hooks[event]) ? hooks[event] : (hooks[event] = []);\n      const idx = list.findIndex((e) => this.isOurEntry(ctx, event, e));\n      if (idx < 0) {\n        list.push(desired);\n        changes.push({ platform: this.id, action: \"create\", path, detail: `hooks.${event}` });\n      } else if (JSON.stringify(list[idx]) !== JSON.stringify(desired)) {\n        list[idx] = desired;\n        changes.push({ platform: this.id, action: \"update\", path, detail: `hooks.${event}` });\n      } else {\n        changes.push({ platform: this.id, action: \"skip\", path, detail: `hooks.${event}` });\n      }\n    }\n\n    // Only a real entry mutation rewrites the file (a warn-skip must not\n    // create/touch hooks.json by itself).\n    if (changes.some((c) => c.action === \"create\" || c.action === \"update\")) {\n      this.writeJson(path, file, dryRun);\n    }\n    return changes;\n  }\n\n  override uninstallHooks(ctx: InstallContext): ChangeRecord[] {\n    const path = this.getHookConfigPath(ctx);\n    const file = this.readJson<CodexHooksFile>(path);\n    const hooks = file?.hooks;\n    if (!file || !hooks) {\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no hooks.json\" }];\n    }\n\n    const changes: ChangeRecord[] = [];\n    let mutated = false;\n    for (const event of CODEX_HOOK_EVENTS) {\n      const list = hooks[event];\n      if (!Array.isArray(list)) continue;\n      const kept = list.filter((e) => !this.isOurEntry(ctx, event, e));\n      if (kept.length === list.length) continue;\n      mutated = true;\n      if (kept.length > 0) hooks[event] = kept;\n      else delete hooks[event];\n      changes.push({ platform: this.id, action: \"remove\", path, detail: `hooks.${event}` });\n    }\n\n    if (mutated) this.writeJson(path, file, ctx.dryRun);\n    if (changes.length === 0) {\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no agent-connector hooks present\" }];\n    }\n    return changes;\n  }\n\n  // ── Health checks (default doctor renders these) ────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const path = this.getServerConfigPath(ctx);\n    const id = ctx.connector.id;\n    const checks: HealthCheck[] = [\n      {\n        name: `${this.name}: config.toml exists`,\n        check: () =>\n          existsSync(path)\n            ? { status: \"OK\", detail: path }\n            : { status: \"FAIL\", detail: `not found: ${path}` },\n      },\n      {\n        name: `${this.name}: mcp_servers.${id} registered`,\n        check: () => {\n          // Only assert what the connector declares (same rule as the\n          // content-surface checks below): a server-less connector — e.g. a\n          // catalog-only bundle of agents/skills/commands — never writes an\n          // [mcp_servers.<id>] table, so its absence is healthy.\n          if (!ctx.connector.server) {\n            return { status: \"OK\", detail: \"no MCP server declared\" };\n          }\n          const cfg = this.readToml(path);\n          const bucket = cfg[\"mcp_servers\"];\n          const present =\n            typeof bucket === \"object\" &&\n            bucket !== null &&\n            id in (bucket as Record<string, unknown>);\n          return present\n            ? { status: \"OK\", detail: `mcp_servers.${id}` }\n            : { status: \"FAIL\", detail: `mcp_servers.${id} not found in ${path}` };\n        },\n      },\n    ];\n\n    // Content-surface checks: assert presence only for surfaces this connector\n    // declares. Codex commands are user-scope only, so a project-scope install\n    // won't have written them — only check command files in user scope.\n    if (ctx.scope !== \"project\") {\n      for (const cmd of ctx.connector.commands) {\n        const p = this.commandPath(cmd.name);\n        checks.push({\n          name: `${this.name}: command ${cmd.name} present`,\n          check: () =>\n            existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n        });\n      }\n    }\n    for (const skill of ctx.connector.skills) {\n      const p = join(this.skillDir(ctx, skill.name), \"SKILL.md\");\n      checks.push({\n        name: `${this.name}: skill ${skill.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    for (const agent of ctx.connector.subagents) {\n      const p = this.subagentPath(ctx, agent.name);\n      checks.push({\n        name: `${this.name}: subagent ${agent.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    return checks;\n  }\n\n  // ── Content surfaces: commands / skills / subagents ──────────────────────\n  // CONTENT-ONLY: pure native-file writers. No runtime dispatch, no home-bin\n  // pointer, no telemetry wrap. Each method is idempotent (byte-identical →\n  // skip) via writeContentFile and reversible via removeContentFile. Honors\n  // platforms[\"codex\"] per-surface false to skip.\n  //\n  // Native locations:\n  //   command  → ~/.codex/prompts/<name>.md   md+frontmatter(description,argument-hint)\n  //              USER SCOPE ONLY — project scope yields a single \"warn\".\n  //   skill    → <codexDir>/skills/<name>/SKILL.md (+ resources)\n  //   subagent → <codexDir>/agents/<name>.toml  TOML via writeTomlString\n\n  /** Command files always live under the USER codex dir: ~/.codex/prompts. */\n  private commandPath(name: string): string {\n    return join(this.userConfigDir(), \"prompts\", `${name}.md`);\n  }\n  private skillDir(ctx: InstallContext, name: string): string {\n    return join(this.getConfigDir(ctx), \"skills\", name);\n  }\n  private subagentPath(ctx: InstallContext, name: string): string {\n    return join(this.getConfigDir(ctx), \"agents\", `${name}.toml`);\n  }\n\n  // ── Commands (USER SCOPE ONLY) ───────────────────────────────────────────\n\n  override installCommands(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[this.id]?.commands === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"commands disabled for codex\" }];\n    }\n    if (ctx.scope === \"project\") {\n      return [{ platform: this.id, action: \"warn\", detail: \"codex commands are user-scope only\" }];\n    }\n    if (connector.commands.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\n    }\n    return connector.commands.map((cmd) =>\n      this.writeContentFile(this.commandPath(cmd.name), this.renderCommand(cmd), ctx.dryRun),\n    );\n  }\n\n  override uninstallCommands(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (ctx.scope === \"project\") {\n      return [{ platform: this.id, action: \"warn\", detail: \"codex commands are user-scope only\" }];\n    }\n    if (connector.commands.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\n    }\n    return connector.commands.map((cmd) =>\n      this.removeContentFile(this.commandPath(cmd.name), ctx.dryRun),\n    );\n  }\n\n  /** Render a command to md+frontmatter (description, argument-hint). */\n  private renderCommand(cmd: CommandDef): string {\n    const frontmatter: Record<string, unknown> = {};\n    if (cmd.description !== undefined) frontmatter.description = cmd.description;\n    if (cmd.argumentHint !== undefined) frontmatter[\"argument-hint\"] = cmd.argumentHint;\n    if (cmd.extra) Object.assign(frontmatter, cmd.extra);\n    return this.renderFrontmatterMd(frontmatter, cmd.prompt);\n  }\n\n  // ── Skills ───────────────────────────────────────────────────────────────\n\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[this.id]?.skills === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for codex\" }];\n    }\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      changes.push(\n        this.writeContentFile(join(dir, \"SKILL.md\"), this.renderSkill(skill), ctx.dryRun),\n      );\n      // Bundle any resource files beside SKILL.md (relative path → contents).\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\n      // (config-time validation already rejects these, but never trust input).\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\n          });\n          continue;\n        }\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\n      }\n    }\n    return changes;\n  }\n\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\n      // skill dir itself when we own its full contents.\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\n      for (const rel of Object.keys(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) continue; // never delete outside the skill dir\n        changes.push(this.removeContentFile(target, ctx.dryRun));\n      }\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\n      // dir that still holds user-added / sibling-tool / shared files.\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\n    }\n    return changes;\n  }\n\n  /**\n   * Render a skill's SKILL.md: frontmatter (name, description + optional model,\n   * allowed-tools, disable-model-invocation) + body. UNIFORM with every other\n   * skill-supporting platform — only the parent dir differs.\n   */\n  private renderSkill(skill: SkillDef): string {\n    const frontmatter: Record<string, unknown> = {\n      name: skill.name,\n      description: skill.description,\n    };\n    if (skill.model !== undefined) frontmatter.model = skill.model;\n    const allow = skill.tools?.allow;\n    if (allow && allow.length > 0) frontmatter[\"allowed-tools\"] = allow.join(\", \");\n    if (skill.disableModelInvocation !== undefined) {\n      frontmatter[\"disable-model-invocation\"] = skill.disableModelInvocation;\n    }\n    if (skill.extra) Object.assign(frontmatter, skill.extra);\n    return this.renderFrontmatterMd(frontmatter, skill.body);\n  }\n\n  // ── Subagents (TOML) ─────────────────────────────────────────────────────\n\n  override installSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[this.id]?.subagents === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"subagents disabled for codex\" }];\n    }\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.writeContentFile(this.subagentPath(ctx, agent.name), this.renderSubagent(agent), ctx.dryRun),\n    );\n  }\n\n  override uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.removeContentFile(this.subagentPath(ctx, agent.name), ctx.dryRun),\n    );\n  }\n\n  /**\n   * Render a subagent to a Codex agent TOML file:\n   *   { name, description, developer_instructions: prompt, model }.\n   * model is omitted when undefined so Codex applies its default.\n   */\n  private renderSubagent(agent: SubagentDef): string {\n    const table: Record<string, unknown> = {\n      name: agent.name,\n      description: agent.description,\n      developer_instructions: agent.prompt,\n    };\n    if (agent.model !== undefined) table.model = agent.model;\n    if (agent.extra) Object.assign(table, agent.extra);\n    return writeTomlString(table);\n  }\n\n  // ── Runtime dispatch ────────────────────────────────────────────────────\n\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\n    const input = (raw ?? {}) as CodexHookInput;\n    const base = {\n      hostPlatform: this.id,\n      connectorId: \"\",\n      sessionId: input.session_id ?? `pid-${process.ppid}`,\n      projectDir: input.cwd ?? process.env.CODEX_PROJECT_DIR ?? process.cwd(),\n      raw,\n    };\n\n    switch (event) {\n      case \"PreToolUse\":\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n        };\n      case \"PostToolUse\":\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          toolOutput: input.tool_response,\n          isError: input.is_error ?? false,\n        };\n      case \"SessionStart\":\n        return { ...base, source: this.normalizeSource(input.source) };\n      case \"SessionEnd\":\n        return { ...base, reason: input.message };\n      case \"UserPromptSubmit\":\n        return { ...base, prompt: input.prompt ?? \"\" };\n      case \"PreCompact\":\n        return { ...base, trigger: input.trigger === \"manual\" ? \"manual\" : \"auto\" };\n      case \"Stop\":\n        return { ...base, stopHookActive: input.stop_hook_active ?? false };\n      case \"Notification\":\n        return { ...base, message: input.message ?? \"\" };\n      case \"PermissionRequest\":\n        // Codex documents tool_name/tool_input (+tool_input.description); it has\n        // no permission_suggestions field, so the normalized optional stays unset.\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n        };\n      case \"PostToolUseFailure\":\n        // No Codex analog — never fired natively. Parsed defensively (Claude-\n        // compatible wire) so a manual `hook codex PostToolUseFailure` invocation\n        // still normalizes instead of throwing.\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          error: input.error ?? \"\",\n        };\n      case \"SubagentStart\":\n        return {\n          ...base,\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\n          ...(typeof input.agent_type === \"string\" ? { agentType: input.agent_type } : {}),\n        };\n      case \"SubagentStop\":\n        // agent_id/agent_type stay optional — never depend on hosts populating\n        // them on stop (the Claude-family SDK quirk).\n        return {\n          ...base,\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\n          ...(typeof input.agent_type === \"string\" ? { agentType: input.agent_type } : {}),\n          ...(typeof input.agent_transcript_path === \"string\"\n            ? { agentTranscriptPath: input.agent_transcript_path }\n            : {}),\n          ...(typeof input.last_assistant_message === \"string\"\n            ? { lastAssistantMessage: input.last_assistant_message }\n            : {}),\n          ...(typeof input.stop_hook_active === \"boolean\"\n            ? { stopHookActive: input.stop_hook_active }\n            : {}),\n        };\n    }\n  }\n\n  formatReply(event: HookEventName, response: HookResponse): HookReply {\n    // Codex (like Claude Code) reads a `hookSpecificOutput` JSON wrapper from\n    // stdout; exit code 0 = allow. Fields the host cannot honor are dropped.\n\n    // PermissionRequest uses Codex's nested decision{behavior} envelope and is\n    // the ONE event where an EXPLICIT \"allow\" is an ACTIVE grant (suppresses the\n    // approval prompt). ask/context/void → NO decision output: fall through to\n    // the normal approval flow (the prompt IS the ask). Codex docs: updatedInput\n    // / updatedPermissions / interrupt FAIL CLOSED on this event, so \"modify\"\n    // also falls through — emitting a bare allow would grant the ORIGINAL input\n    // the handler wanted rewritten.\n    if (event === \"PermissionRequest\") {\n      if (response.decision === \"deny\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PermissionRequest\",\n              decision: {\n                behavior: \"deny\",\n                message: response.reason ?? \"Blocked by hook\",\n              },\n            },\n          }),\n        };\n      }\n      if (response.decision === \"allow\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PermissionRequest\",\n              decision: { behavior: \"allow\" },\n            },\n          }),\n        };\n      }\n      return { exitCode: 0 };\n    }\n\n    // SubagentStart is observe/context-only on Codex (continue:false is parsed\n    // but does not stop the subagent): \"context\" injects additionalContext as\n    // developer context for the SUBAGENT, and a \"deny\" DEGRADES to the same\n    // shape carrying the reason.\n    if (event === \"SubagentStart\") {\n      const context =\n        response.decision === \"context\"\n          ? response.additionalContext\n          : response.decision === \"deny\"\n            ? response.reason ?? response.additionalContext\n            : undefined;\n      if (context) {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"SubagentStart\",\n              additionalContext: context,\n            },\n          }),\n        };\n      }\n      return { exitCode: 0 };\n    }\n\n    if (response.decision === \"deny\") {\n      // PreToolUse deny is honored; other events fail-open to allow.\n      if (event === \"PreToolUse\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PreToolUse\",\n              permissionDecision: \"deny\",\n              permissionDecisionReason: response.reason ?? \"Blocked by hook\",\n            },\n          }),\n        };\n      }\n      // SubagentStop deny = Stop semantics: the documented continuation shape is\n      // the TOP-LEVEL {\"decision\":\"block\",\"reason\"} (keeps the subagent going\n      // with `reason` as its next instruction).\n      if (event === \"SubagentStop\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            decision: \"block\",\n            reason: response.reason ?? \"Blocked by hook\",\n          }),\n        };\n      }\n      return { exitCode: 0 };\n    }\n\n    // Context injection: honored on SessionStart and PostToolUse (additionalContext).\n    // (SubagentStop accepts only the common output fields — no additionalContext.)\n    if (response.additionalContext && (event === \"SessionStart\" || event === \"PostToolUse\")) {\n      return {\n        exitCode: 0,\n        stdout: JSON.stringify({\n          hookSpecificOutput: {\n            hookEventName: event,\n            additionalContext: response.additionalContext,\n          },\n        }),\n      };\n    }\n\n    // \"allow\" / unsupported-on-Codex (modify, ask) → passthrough.\n    return { exitCode: 0 };\n  }\n\n  // ── Internal helpers ────────────────────────────────────────────────────\n\n  /** Resolve the per-platform server override into an effective ServerDef. */\n  private effectiveServer(ctx: InstallContext): ServerDef | undefined {\n    const override = ctx.connector.platforms[this.id]?.server;\n    if (override === false) return undefined;\n    const base = ctx.connector.server;\n    if (!base) return undefined;\n    return override ? { ...base, ...override } : base;\n  }\n\n  /** Which canonical hook events to register for Codex, honoring overrides. */\n  private effectiveHookEvents(ctx: InstallContext): CodexHookEventName[] {\n    const override = ctx.connector.platforms[this.id]?.hooks;\n    if (override === false) return [];\n    return CODEX_HOOK_EVENTS.filter((e) => ctx.connector.hookEvents.includes(e));\n  }\n\n  /** Declared events Codex has no analog for — install reports a warn-skip. */\n  private warnSkipHookEvents(ctx: InstallContext): HookEventName[] {\n    const override = ctx.connector.platforms[this.id]?.hooks;\n    if (override === false) return [];\n    return ctx.connector.hookEvents.filter((e) => WARN_SKIP_EVENTS.has(e));\n  }\n\n  /**\n   * Render the `[mcp_servers.<id>]` table. TOML has NO interpolation, so every\n   * `${env:VAR}` is resolved to a literal at install time. The env table is a\n   * plain string→string map. Honors the telemetry serve-wrapper.\n   */\n  private renderMcpEntry(ctx: InstallContext, server: ServerDef): CodexMcpEntry {\n    let command = server.command as string;\n    let args = [...(server.args ?? [])];\n\n    if (shouldWrapForTelemetry(server, ctx.connector.telemetry)) {\n      const wrapped = buildServeWrapperCommand(ctx.homeBinPath, ctx.connector.id, command, args, ctx.scope, this.id);\n      command = wrapped.command;\n      args = wrapped.args;\n    }\n\n    // Resolve env-refs to literals (TOML cannot interpolate).\n    command = resolveEnvRefsDeep(command);\n    args = resolveEnvRefsDeep(args);\n\n    const entry: CodexMcpEntry = { command };\n    if (args.length > 0) entry.args = args;\n\n    if (server.env && Object.keys(server.env).length > 0) {\n      const env: Record<string, string> = {};\n      for (const [k, v] of Object.entries(resolveEnvRefsDeep(server.env))) {\n        env[k] = String(v);\n      }\n      entry.env = env;\n    }\n    return entry;\n  }\n\n  /** Render one hooks.json entry pointing at the stable home binary. */\n  private renderHookEntry(ctx: InstallContext, event: CodexHookEventName): CodexHookEntry {\n    const command = buildHomeBinHookCommand(\n      ctx.homeBinPath,\n      \"codex\",\n      event,\n      ctx.connector.id,\n    );\n    const entry: CodexHookEntry = { hooks: [{ type: \"command\", command }] };\n    // PermissionRequest matches tool names exactly like PreToolUse (Bash,\n    // apply_patch aliases, mcp__* names), so it carries the same charset-clean\n    // matcher. Subagent* match agent_type — register \"\" (all agents) and let the\n    // universal entrypoint apply the connector's own matcher at runtime.\n    if (event === \"PreToolUse\" || event === \"PermissionRequest\") {\n      entry.matcher = PRE_TOOL_USE_MATCHER;\n    } else entry.matcher = \"\";\n    return entry;\n  }\n\n  /** Does this hooks.json entry belong to this connector (by home-bin command)? */\n  private isOurEntry(ctx: InstallContext, event: CodexHookEventName, entry: CodexHookEntry): boolean {\n    if (!entry || typeof entry !== \"object\" || !Array.isArray(entry.hooks)) return false;\n    const ours = buildHomeBinHookCommand(ctx.homeBinPath, \"codex\", event, ctx.connector.id);\n    const needle = ours.replace(/\\\\/g, \"/\");\n    return entry.hooks.some((h) => (h.command ?? \"\").replace(/\\\\/g, \"/\") === needle);\n  }\n\n  private readHooksFile(path: string): CodexHooksFile {\n    return this.readJson<CodexHooksFile>(path) ?? {};\n  }\n\n  /** Get-or-create a nested table inside a parsed TOML object. */\n  private tomlBucket(cfg: Record<string, unknown>, key: string): Record<string, unknown> {\n    const existing = cfg[key];\n    if (existing && typeof existing === \"object\" && !Array.isArray(existing)) {\n      return existing as Record<string, unknown>;\n    }\n    const fresh: Record<string, unknown> = {};\n    cfg[key] = fresh;\n    return fresh;\n  }\n\n  private normalizeSource(raw: string | undefined): \"startup\" | \"compact\" | \"resume\" | \"clear\" {\n    switch (raw) {\n      case \"compact\":\n        return \"compact\";\n      case \"resume\":\n        return \"resume\";\n      case \"clear\":\n        return \"clear\";\n      default:\n        return \"startup\";\n    }\n  }\n}\n\nexport const adapter = new CodexAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAkCA,SAAS,YAAY,cAAc,qBAAqB;AACxD,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AAE9B,OAAO,UAAU;AAoFjB,IAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAWA,IAAM,mBAA+C,oBAAI,IAAI,CAAC,oBAAoB,CAAC;AAQnF,IAAM,uBACJ;AAMK,IAAM,eAAN,cAA2B,YAAY;AAAA,EACnC,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA,IAChB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA;AAAA;AAAA,IAId,mBAAmB;AAAA,IACnB,eAAe;AAAA,IACf,cAAc;AAAA,IACd,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA,IACzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,IAK5B,kBAAkB;AAAA,IAClB,gBAAgB;AAAA,IAChB,mBAAmB;AAAA,EACrB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,cAAc;AACnC,UAAM,UAAU,KAAK,YAAY,QAAQ;AACzC,UAAM,UAAU,KAAK,SAAS,aAAa;AAC3C,UAAM,UAAU,KAAK,SAAS,aAAa;AAE3C,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,YAAY,iBAAiB;AACnC,UAAM,QAAQ,iBAAiB,CAAC,gBAAgB,YAAY;AAC5D,UAAM,aAAa,UAAU,YAAY,UAAU;AAEnD,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,2BAA2B,KAAK,MAChC,2BAA2B,OAAO,OAAO,OAAO;AAAA,MACpD,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIS,aAAa,KAA6B;AACjD,QAAI,IAAI,UAAU,UAAW,QAAO,KAAK,IAAI,YAAY,QAAQ;AACjE,WAAO,KAAK,cAAc;AAAA,EAC5B;AAAA,EAES,oBAAoB,KAA6B;AACxD,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,aAAa;AAAA,EACnD;AAAA,EAES,kBAAkB,KAA6B;AACtD,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,YAAY;AAAA,EAClD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOmB,cAAc,KAAqC;AAEpE,QAAI,KAAK,eAAe,GAAG,GAAG,KAAM,QAAO,MAAM,cAAc,GAAG;AAClE,QAAI,IAAI,UAAU,aAAa,IAAI,UAAU,OAAQ,QAAO,CAAC;AAC7D,UAAM,cAAc,KAAK;AACzB,UAAM,MAAM,IAAI,UAAU,YAAY,IAAI,aAAa,KAAK,cAAc;AAC1E,UAAM,aAAa,KAAK,KAAK,oBAAoB;AACjD,QAAI,WAAW,UAAU,GAAG;AAC1B,aAAO;AAAA,QACL;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,QACE,MAAM,KAAK,KAAK,WAAW;AAAA,QAC3B,QACE,IAAI,UAAU,YACV,wEACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGQ,gBAAwB;AAC9B,UAAM,MAAM,QAAQ,IAAI;AACxB,QAAI,OAAO,IAAI,KAAK,MAAM,IAAI;AAC5B,UAAI,IAAI,WAAW,GAAG,GAAG;AACvB,eAAO,KAAK,QAAQ,GAAG,IAAI,QAAQ,YAAY,EAAE,CAAC;AAAA,MACpD;AACA,aAAO;AAAA,IACT;AACA,WAAO,KAAK,QAAQ,GAAG,QAAQ;AAAA,EACjC;AAAA;AAAA,EAIQ,SAAS,MAAuC;AACtD,QAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,QAAI;AACF,aAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,IAC9C,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA,EAEQ,UAAU,MAAc,MAA+B,QAAuB;AACpF,QAAI,OAAQ;AACZ,cAAU,QAAQ,IAAI,CAAC;AAEvB,kBAAc,MAAM,KAAK,UAAU,IAAa,GAAG,MAAM;AAAA,EAC3D;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,WAAW,OAAO,IAAI;AAC9B,UAAM,SAAS,KAAK,gBAAgB,GAAG;AACvC,UAAM,OAAO,KAAK,oBAAoB,GAAG;AAEzC,QAAI,CAAC,QAAQ;AACX,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,qBAAqB,CAAC;AAAA,IACnF;AACA,QAAI,OAAO,cAAc,WAAW,CAAC,OAAO,SAAS;AAEnD,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR;AAAA,UACA,QAAQ,cAAc,OAAO,SAAS;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,QAAQ,KAAK,eAAe,KAAK,MAAM;AAE7C,UAAM,MAAM,KAAK,SAAS,IAAI;AAC9B,UAAM,SAAS,KAAK,WAAW,KAAK,aAAa;AACjD,UAAM,SAAS,KAAK,UAAU,OAAO,UAAU,EAAE,CAAC;AAClD,UAAM,QAAQ,KAAK,UAAU,KAAK;AAElC,QAAI;AACJ,QAAI,WAAW,OAAW,UAAS;AAAA,aAC1B,WAAW,MAAO,UAAS;AAAA,QAC/B,UAAS;AAEd,QAAI,WAAW,QAAQ;AACrB,aAAO,UAAU,EAAE,IAAI;AACvB,WAAK,UAAU,MAAM,KAAK,MAAM;AAAA,IAClC;AACA,WAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,MAAM,QAAQ,eAAe,UAAU,EAAE,GAAG,CAAC;AAAA,EACpF;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,WAAW,OAAO,IAAI;AAC9B,UAAM,OAAO,KAAK,oBAAoB,GAAG;AACzC,UAAM,MAAM,KAAK,SAAS,IAAI;AAC9B,UAAM,SAAS,IAAI,aAAa;AAChC,QACE,CAAC,WAAW,IAAI,KAChB,OAAO,WAAW,YAClB,WAAW,QACX,EAAE,UAAU,MAAO,SACnB;AACA,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR;AAAA,UACA,QAAQ,eAAe,UAAU,EAAE;AAAA,QACrC;AAAA,MACF;AAAA,IACF;AACA,WAAQ,OAAmC,UAAU,EAAE;AACvD,SAAK,UAAU,MAAM,KAAK,MAAM;AAChC,WAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,UAAU,MAAM,QAAQ,eAAe,UAAU,EAAE,GAAG,CAAC;AAAA,EAC9F;AAAA;AAAA,EAIS,aAAa,KAAqC;AACzD,UAAM,EAAE,WAAW,OAAO,IAAI;AAC9B,UAAM,OAAO,KAAK,kBAAkB,GAAG;AACvC,UAAM,SAAS,KAAK,oBAAoB,GAAG;AAC3C,UAAM,UAAU,KAAK,mBAAmB,GAAG;AAE3C,QAAI,OAAO,WAAW,KAAK,QAAQ,WAAW,GAAG;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,oBAAoB,CAAC;AAAA,IAClF;AAEA,UAAM,OAAO,KAAK,cAAc,IAAI;AACpC,UAAM,QAAS,KAAK,UAAU,CAAC;AAC/B,UAAM,UAA0B,CAAC;AAGjC,eAAW,SAAS,SAAS;AAC3B,cAAQ,KAAK;AAAA,QACX,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR;AAAA,QACA,QAAQ,GAAG,KAAK;AAAA,MAClB,CAAC;AAAA,IACH;AAEA,eAAW,SAAS,QAAQ;AAC1B,YAAM,UAAU,KAAK,gBAAgB,KAAK,KAAK;AAC/C,YAAM,OAAO,MAAM,QAAQ,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,IAAK,MAAM,KAAK,IAAI,CAAC;AAC3E,YAAM,MAAM,KAAK,UAAU,CAAC,MAAM,KAAK,WAAW,KAAK,OAAO,CAAC,CAAC;AAChE,UAAI,MAAM,GAAG;AACX,aAAK,KAAK,OAAO;AACjB,gBAAQ,KAAK,EAAE,UAAU,KAAK,IAAI,QAAQ,UAAU,MAAM,QAAQ,SAAS,KAAK,GAAG,CAAC;AAAA,MACtF,WAAW,KAAK,UAAU,KAAK,GAAG,CAAC,MAAM,KAAK,UAAU,OAAO,GAAG;AAChE,aAAK,GAAG,IAAI;AACZ,gBAAQ,KAAK,EAAE,UAAU,KAAK,IAAI,QAAQ,UAAU,MAAM,QAAQ,SAAS,KAAK,GAAG,CAAC;AAAA,MACtF,OAAO;AACL,gBAAQ,KAAK,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,SAAS,KAAK,GAAG,CAAC;AAAA,MACpF;AAAA,IACF;AAIA,QAAI,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,YAAY,EAAE,WAAW,QAAQ,GAAG;AACvE,WAAK,UAAU,MAAM,MAAM,MAAM;AAAA,IACnC;AACA,WAAO;AAAA,EACT;AAAA,EAES,eAAe,KAAqC;AAC3D,UAAM,OAAO,KAAK,kBAAkB,GAAG;AACvC,UAAM,OAAO,KAAK,SAAyB,IAAI;AAC/C,UAAM,QAAQ,MAAM;AACpB,QAAI,CAAC,QAAQ,CAAC,OAAO;AACnB,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,gBAAgB,CAAC;AAAA,IAC9E;AAEA,UAAM,UAA0B,CAAC;AACjC,QAAI,UAAU;AACd,eAAW,SAAS,mBAAmB;AACrC,YAAM,OAAO,MAAM,KAAK;AACxB,UAAI,CAAC,MAAM,QAAQ,IAAI,EAAG;AAC1B,YAAM,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,WAAW,KAAK,OAAO,CAAC,CAAC;AAC/D,UAAI,KAAK,WAAW,KAAK,OAAQ;AACjC,gBAAU;AACV,UAAI,KAAK,SAAS,EAAG,OAAM,KAAK,IAAI;AAAA,UAC/B,QAAO,MAAM,KAAK;AACvB,cAAQ,KAAK,EAAE,UAAU,KAAK,IAAI,QAAQ,UAAU,MAAM,QAAQ,SAAS,KAAK,GAAG,CAAC;AAAA,IACtF;AAEA,QAAI,QAAS,MAAK,UAAU,MAAM,MAAM,IAAI,MAAM;AAClD,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,mCAAmC,CAAC;AAAA,IACjG;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,OAAO,KAAK,oBAAoB,GAAG;AACzC,UAAM,KAAK,IAAI,UAAU;AACzB,UAAM,SAAwB;AAAA,MAC5B;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,IAAI,IACX,EAAE,QAAQ,MAAM,QAAQ,KAAK,IAC7B,EAAE,QAAQ,QAAQ,QAAQ,cAAc,IAAI,GAAG;AAAA,MACvD;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI,iBAAiB,EAAE;AAAA,QACrC,OAAO,MAAM;AAKX,cAAI,CAAC,IAAI,UAAU,QAAQ;AACzB,mBAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AAAA,UAC1D;AACA,gBAAM,MAAM,KAAK,SAAS,IAAI;AAC9B,gBAAM,SAAS,IAAI,aAAa;AAChC,gBAAM,UACJ,OAAO,WAAW,YAClB,WAAW,QACX,MAAO;AACT,iBAAO,UACH,EAAE,QAAQ,MAAM,QAAQ,eAAe,EAAE,GAAG,IAC5C,EAAE,QAAQ,QAAQ,QAAQ,eAAe,EAAE,iBAAiB,IAAI,GAAG;AAAA,QACzE;AAAA,MACF;AAAA,IACF;AAKA,QAAI,IAAI,UAAU,WAAW;AAC3B,iBAAW,OAAO,IAAI,UAAU,UAAU;AACxC,cAAM,IAAI,KAAK,YAAY,IAAI,IAAI;AACnC,eAAO,KAAK;AAAA,UACV,MAAM,GAAG,KAAK,IAAI,aAAa,IAAI,IAAI;AAAA,UACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,QAC9F,CAAC;AAAA,MACH;AAAA,IACF;AACA,eAAW,SAAS,IAAI,UAAU,QAAQ;AACxC,YAAM,IAAI,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU;AACzD,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,WAAW,MAAM,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,eAAW,SAAS,IAAI,UAAU,WAAW;AAC3C,YAAM,IAAI,KAAK,aAAa,KAAK,MAAM,IAAI;AAC3C,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,cAAc,MAAM,IAAI;AAAA,QAC1C,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,YAAY,MAAsB;AACxC,WAAO,KAAK,KAAK,cAAc,GAAG,WAAW,GAAG,IAAI,KAAK;AAAA,EAC3D;AAAA,EACQ,SAAS,KAAqB,MAAsB;AAC1D,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU,IAAI;AAAA,EACpD;AAAA,EACQ,aAAa,KAAqB,MAAsB;AAC9D,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU,GAAG,IAAI,OAAO;AAAA,EAC9D;AAAA;AAAA,EAIS,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,aAAa,OAAO;AACpD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,8BAA8B,CAAC;AAAA,IACtF;AACA,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,qCAAqC,CAAC;AAAA,IAC7F;AACA,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK,iBAAiB,KAAK,YAAY,IAAI,IAAI,GAAG,KAAK,cAAc,GAAG,GAAG,IAAI,MAAM;AAAA,IACvF;AAAA,EACF;AAAA,EAES,kBAAkB,KAAqC;AAC9D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,qCAAqC,CAAC;AAAA,IAC7F;AACA,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK,kBAAkB,KAAK,YAAY,IAAI,IAAI,GAAG,IAAI,MAAM;AAAA,IAC/D;AAAA,EACF;AAAA;AAAA,EAGQ,cAAc,KAAyB;AAC7C,UAAM,cAAuC,CAAC;AAC9C,QAAI,IAAI,gBAAgB,OAAW,aAAY,cAAc,IAAI;AACjE,QAAI,IAAI,iBAAiB,OAAW,aAAY,eAAe,IAAI,IAAI;AACvE,QAAI,IAAI,MAAO,QAAO,OAAO,aAAa,IAAI,KAAK;AACnD,WAAO,KAAK,oBAAoB,aAAa,IAAI,MAAM;AAAA,EACzD;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,WAAW,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,4BAA4B,CAAC;AAAA,IACpF;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,cAAQ;AAAA,QACN,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,KAAK,YAAY,KAAK,GAAG,IAAI,MAAM;AAAA,MAClF;AAIA,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,YAAY,OAAyB;AAC3C,UAAM,cAAuC;AAAA,MAC3C,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,IACrB;AACA,QAAI,MAAM,UAAU,OAAW,aAAY,QAAQ,MAAM;AACzD,UAAM,QAAQ,MAAM,OAAO;AAC3B,QAAI,SAAS,MAAM,SAAS,EAAG,aAAY,eAAe,IAAI,MAAM,KAAK,IAAI;AAC7E,QAAI,MAAM,2BAA2B,QAAW;AAC9C,kBAAY,0BAA0B,IAAI,MAAM;AAAA,IAClD;AACA,QAAI,MAAM,MAAO,QAAO,OAAO,aAAa,MAAM,KAAK;AACvD,WAAO,KAAK,oBAAoB,aAAa,MAAM,IAAI;AAAA,EACzD;AAAA;AAAA,EAIS,iBAAiB,KAAqC;AAC7D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,cAAc,OAAO;AACrD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,iBAAiB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,KAAK,eAAe,KAAK,GAAG,IAAI,MAAM;AAAA,IAClG;AAAA,EACF;AAAA,EAES,mBAAmB,KAAqC;AAC/D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,kBAAkB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;AAAA,IACvE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,eAAe,OAA4B;AACjD,UAAM,QAAiC;AAAA,MACrC,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,MACnB,wBAAwB,MAAM;AAAA,IAChC;AACA,QAAI,MAAM,UAAU,OAAW,OAAM,QAAQ,MAAM;AACnD,QAAI,MAAM,MAAO,QAAO,OAAO,OAAO,MAAM,KAAK;AACjD,WAAO,gBAAgB,KAAK;AAAA,EAC9B;AAAA;AAAA,EAIA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,OAAO;AAAA,MACX,cAAc,KAAK;AAAA,MACnB,aAAa;AAAA,MACb,WAAW,MAAM,cAAc,OAAO,QAAQ,IAAI;AAAA,MAClD,YAAY,MAAM,OAAO,QAAQ,IAAI,qBAAqB,QAAQ,IAAI;AAAA,MACtE;AAAA,IACF;AAEA,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,YAAY,MAAM;AAAA,UAClB,SAAS,MAAM,YAAY;AAAA,QAC7B;AAAA,MACF,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,KAAK,gBAAgB,MAAM,MAAM,EAAE;AAAA,MAC/D,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,MAAM,QAAQ;AAAA,MAC1C,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,MAAM,UAAU,GAAG;AAAA,MAC/C,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,YAAY,WAAW,WAAW,OAAO;AAAA,MAC5E,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,gBAAgB,MAAM,oBAAoB,MAAM;AAAA,MACpE,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,WAAW,GAAG;AAAA,MACjD,KAAK;AAGH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AAAA,MACF,KAAK;AAIH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,OAAO,MAAM,SAAS;AAAA,QACxB;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,WAAW,MAAM,WAAW,IAAI,CAAC;AAAA,QAChF;AAAA,MACF,KAAK;AAGH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,WAAW,MAAM,WAAW,IAAI,CAAC;AAAA,UAC9E,GAAI,OAAO,MAAM,0BAA0B,WACvC,EAAE,qBAAqB,MAAM,sBAAsB,IACnD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,2BAA2B,WACxC,EAAE,sBAAsB,MAAM,uBAAuB,IACrD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,qBAAqB,YAClC,EAAE,gBAAgB,MAAM,iBAAiB,IACzC,CAAC;AAAA,QACP;AAAA,IACJ;AAAA,EACF;AAAA,EAEA,YAAY,OAAsB,UAAmC;AAWnE,QAAI,UAAU,qBAAqB;AACjC,UAAI,SAAS,aAAa,QAAQ;AAChC,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,UAAU;AAAA,gBACR,UAAU;AAAA,gBACV,SAAS,SAAS,UAAU;AAAA,cAC9B;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,UAAI,SAAS,aAAa,SAAS;AACjC,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,UAAU,EAAE,UAAU,QAAQ;AAAA,YAChC;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAMA,QAAI,UAAU,iBAAiB;AAC7B,YAAM,UACJ,SAAS,aAAa,YAClB,SAAS,oBACT,SAAS,aAAa,SACpB,SAAS,UAAU,SAAS,oBAC5B;AACR,UAAI,SAAS;AACX,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,mBAAmB;AAAA,YACrB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAEA,QAAI,SAAS,aAAa,QAAQ;AAEhC,UAAI,UAAU,cAAc;AAC1B,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,oBAAoB;AAAA,cACpB,0BAA0B,SAAS,UAAU;AAAA,YAC/C;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAIA,UAAI,UAAU,gBAAgB;AAC5B,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,UAAU;AAAA,YACV,QAAQ,SAAS,UAAU;AAAA,UAC7B,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAIA,QAAI,SAAS,sBAAsB,UAAU,kBAAkB,UAAU,gBAAgB;AACvF,aAAO;AAAA,QACL,UAAU;AAAA,QACV,QAAQ,KAAK,UAAU;AAAA,UACrB,oBAAoB;AAAA,YAClB,eAAe;AAAA,YACf,mBAAmB,SAAS;AAAA,UAC9B;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAGA,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB;AAAA;AAAA;AAAA,EAKQ,gBAAgB,KAA4C;AAClE,UAAM,WAAW,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG;AACnD,QAAI,aAAa,MAAO,QAAO;AAC/B,UAAM,OAAO,IAAI,UAAU;AAC3B,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,WAAW,EAAE,GAAG,MAAM,GAAG,SAAS,IAAI;AAAA,EAC/C;AAAA;AAAA,EAGQ,oBAAoB,KAA2C;AACrE,UAAM,WAAW,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG;AACnD,QAAI,aAAa,MAAO,QAAO,CAAC;AAChC,WAAO,kBAAkB,OAAO,CAAC,MAAM,IAAI,UAAU,WAAW,SAAS,CAAC,CAAC;AAAA,EAC7E;AAAA;AAAA,EAGQ,mBAAmB,KAAsC;AAC/D,UAAM,WAAW,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG;AACnD,QAAI,aAAa,MAAO,QAAO,CAAC;AAChC,WAAO,IAAI,UAAU,WAAW,OAAO,CAAC,MAAM,iBAAiB,IAAI,CAAC,CAAC;AAAA,EACvE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,eAAe,KAAqB,QAAkC;AAC5E,QAAI,UAAU,OAAO;AACrB,QAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAElC,QAAI,uBAAuB,QAAQ,IAAI,UAAU,SAAS,GAAG;AAC3D,YAAM,UAAU,yBAAyB,IAAI,aAAa,IAAI,UAAU,IAAI,SAAS,MAAM,IAAI,OAAO,KAAK,EAAE;AAC7G,gBAAU,QAAQ;AAClB,aAAO,QAAQ;AAAA,IACjB;AAGA,cAAU,mBAAmB,OAAO;AACpC,WAAO,mBAAmB,IAAI;AAE9B,UAAM,QAAuB,EAAE,QAAQ;AACvC,QAAI,KAAK,SAAS,EAAG,OAAM,OAAO;AAElC,QAAI,OAAO,OAAO,OAAO,KAAK,OAAO,GAAG,EAAE,SAAS,GAAG;AACpD,YAAM,MAA8B,CAAC;AACrC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,mBAAmB,OAAO,GAAG,CAAC,GAAG;AACnE,YAAI,CAAC,IAAI,OAAO,CAAC;AAAA,MACnB;AACA,YAAM,MAAM;AAAA,IACd;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,gBAAgB,KAAqB,OAA2C;AACtF,UAAM,UAAU;AAAA,MACd,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,IAAI,UAAU;AAAA,IAChB;AACA,UAAM,QAAwB,EAAE,OAAO,CAAC,EAAE,MAAM,WAAW,QAAQ,CAAC,EAAE;AAKtE,QAAI,UAAU,gBAAgB,UAAU,qBAAqB;AAC3D,YAAM,UAAU;AAAA,IAClB,MAAO,OAAM,UAAU;AACvB,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,WAAW,KAAqB,OAA2B,OAAgC;AACjG,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,KAAK,EAAG,QAAO;AAC/E,UAAM,OAAO,wBAAwB,IAAI,aAAa,SAAS,OAAO,IAAI,UAAU,EAAE;AACtF,UAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;AACtC,WAAO,MAAM,MAAM,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,QAAQ,OAAO,GAAG,MAAM,MAAM;AAAA,EACjF;AAAA,EAEQ,cAAc,MAA8B;AAClD,WAAO,KAAK,SAAyB,IAAI,KAAK,CAAC;AAAA,EACjD;AAAA;AAAA,EAGQ,WAAW,KAA8B,KAAsC;AACrF,UAAM,WAAW,IAAI,GAAG;AACxB,QAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAAG;AACxE,aAAO;AAAA,IACT;AACA,UAAM,QAAiC,CAAC;AACxC,QAAI,GAAG,IAAI;AACX,WAAO;AAAA,EACT;AAAA,EAEQ,gBAAgB,KAAqE;AAC3F,YAAQ,KAAK;AAAA,MACX,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO;AAAA,IACX;AAAA,EACF;AACF;AAEO,IAAM,UAAU,IAAI,aAAa;AACxC,IAAO,gBAAQ;","names":[]}

package/dist/{copilot-cli-MTCGHZ2T.js → copilot-cli-IPISKO3V.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-DBQMX75U.js";
 import {
   BaseAdapter
-} from "./chunk-TIIP3RG2.js";
+} from "./chunk-PD4VFEBY.js";
 import "./chunk-7L6ITC4T.js";
 import {
   buildHomeBinHookCommand,
@@ -12,6 +12,7 @@ import {
   isHomeBinHookCommand,
   shouldWrapForTelemetry
 } from "./chunk-MEH7GC7R.js";
+import "./chunk-N6HH7K6P.js";
 import "./chunk-TRQKHP7D.js";
 
 // src/adapters/copilot-cli/index.ts
@@ -26,6 +27,9 @@ var CopilotCliAdapter = class extends BaseAdapter {
   name = "GitHub Copilot CLI";
   paradigm = "json-stdio";
   capabilities = {
+    // Memory surface: AGENTS.md-first managed block (project <projectDir>/AGENTS.md
+    // via the base default; user scope → ~/.copilot/copilot-instructions.md below).
+    supportsMemory: true,
     // Copilot CLI delivers the full Claude-compatible lifecycle event set.
     preToolUse: true,
     postToolUse: true,
@@ -35,6 +39,13 @@ var CopilotCliAdapter = class extends BaseAdapter {
     userPromptSubmit: true,
     stop: true,
     notification: true,
+    // Newer events — Copilot CLI has native analogs for all four:
+    // permissionRequest (decision control), postToolUseFailure (recovery
+    // guidance), subagentStart (context-only), subagentStop (blockable).
+    permissionRequest: true,
+    postToolUseFailure: true,
+    subagentStart: true,
+    subagentStop: true,
     // PreToolUse is fail-closed and can rewrite tool input (updatedInput); a
     // PostToolUse hook cannot rewrite already-emitted tool output.
     canModifyArgs: true,
@@ -66,6 +77,22 @@ var CopilotCliAdapter = class extends BaseAdapter {
       confidence: installed ? "high" : "low"
     };
   }
+  // ── Memory surface: user-scope global instructions file ─────────────────
+  // Project scope stays on the AGENTS.md base default (root AGENTS.md is the
+  // primary instructions file). User scope targets Copilot CLI's documented
+  // $HOME/.copilot/copilot-instructions.md — a markdown file shared with other
+  // writers, so the managed block (not whole-file ownership) applies as usual.
+  memoryTargets(ctx) {
+    if (this.memoryOverride(ctx)?.path || ctx.scope !== "user") {
+      return super.memoryTargets(ctx);
+    }
+    return [
+      {
+        path: join(homedir(), ".copilot", "copilot-instructions.md"),
+        reason: "copilot-cli global instructions (~/.copilot/copilot-instructions.md)"
+      }
+    ];
+  }
   // ── Native paths ─────────────────────────────────────────────────────────
   /** Copilot CLI is user/global only — scope is ignored. */
   getConfigDir(_ctx) {
@@ -535,6 +562,46 @@ var CopilotCliAdapter = class extends BaseAdapter {
         };
         return ev;
       }
+      case "PermissionRequest": {
+        const ev = {
+          ...base,
+          toolName: input.tool_name ?? "",
+          toolInput: input.tool_input ?? {},
+          ...Array.isArray(input.permission_suggestions) ? { permissionSuggestions: input.permission_suggestions } : {}
+        };
+        return ev;
+      }
+      case "PostToolUseFailure": {
+        const ev = {
+          ...base,
+          toolName: input.tool_name ?? "",
+          toolInput: input.tool_input ?? {},
+          error: typeof input.error === "string" ? input.error : "",
+          ...typeof input.tool_use_id === "string" ? { toolUseId: input.tool_use_id } : {},
+          ...typeof input.is_interrupt === "boolean" ? { isInterrupt: input.is_interrupt } : {},
+          ...typeof input.duration_ms === "number" ? { durationMs: input.duration_ms } : {}
+        };
+        return ev;
+      }
+      case "SubagentStart": {
+        const ev = {
+          ...base,
+          ...typeof input.agent_id === "string" ? { agentId: input.agent_id } : {},
+          ...typeof input.agent_type === "string" ? { agentType: input.agent_type } : {}
+        };
+        return ev;
+      }
+      case "SubagentStop": {
+        const ev = {
+          ...base,
+          ...typeof input.agent_id === "string" ? { agentId: input.agent_id } : {},
+          ...typeof input.agent_type === "string" ? { agentType: input.agent_type } : {},
+          ...typeof input.agent_transcript_path === "string" ? { agentTranscriptPath: input.agent_transcript_path } : {},
+          ...typeof input.last_assistant_message === "string" ? { lastAssistantMessage: input.last_assistant_message } : {},
+          ...typeof input.stop_hook_active === "boolean" ? { stopHookActive: input.stop_hook_active } : {}
+        };
+        return ev;
+      }
       default: {
         const _never = event;
         throw new Error(`unsupported copilot-cli hook event: ${String(_never)}`);
@@ -545,7 +612,47 @@ var CopilotCliAdapter = class extends BaseAdapter {
   formatReply(event, response) {
     const hookEventName = event;
     const decision = response.decision ?? "allow";
+    if (event === "PermissionRequest") {
+      if (response.decision === "deny") {
+        return this.stdout({
+          hookSpecificOutput: {
+            hookEventName,
+            decision: {
+              behavior: "deny",
+              message: response.reason ?? "Blocked by hook"
+            }
+          }
+        });
+      }
+      if (response.decision === "allow" || response.decision === "modify" && response.updatedInput) {
+        return this.stdout({
+          hookSpecificOutput: {
+            hookEventName,
+            decision: {
+              behavior: "allow",
+              ...response.updatedInput ? { updatedInput: response.updatedInput } : {}
+            }
+          }
+        });
+      }
+      return { exitCode: 0 };
+    }
+    if (event === "PostToolUseFailure" || event === "SubagentStart") {
+      const context = decision === "context" ? response.additionalContext : decision === "deny" ? response.reason ?? response.additionalContext : void 0;
+      if (context) {
+        return this.stdout({
+          hookSpecificOutput: { hookEventName, additionalContext: context }
+        });
+      }
+      return { exitCode: 0 };
+    }
     if (decision === "deny") {
+      if (event === "SubagentStop") {
+        return this.stdout({
+          decision: "block",
+          reason: response.reason ?? "Blocked by hook"
+        });
+      }
       return this.stdout({
         hookSpecificOutput: {
           hookEventName,
@@ -619,4 +726,4 @@ export {
   adapter,
   copilot_cli_default as default
 };
-//# sourceMappingURL=copilot-cli-MTCGHZ2T.js.map
+//# sourceMappingURL=copilot-cli-IPISKO3V.js.map