@ken-jo/agent-connector 0.4.67 → 0.4.79

package/dist/codebuff-RJIDSEU3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/codebuff/index.ts"],"sourcesContent":["/**\n * adapters/codebuff — Codebuff platform adapter for agent-connector.\n *\n * Codebuff is an **mcp-only** host: it exposes no lifecycle hook system, and MCP\n * is its extensibility mechanism. This adapter therefore installs only the MCP\n * server and reports hooks as unavailable (mirrors the Warp reference path that\n * validates the `mcp-only` paradigm end-to-end).\n *\n * MCP config (SPEC):\n *   - project scope (preferred) → <projectDir>/.agents/mcp.json\n *   - user scope               → ~/.agents/mcp.json\n *   Both are JSON, root key \"mcpServers\". There is no separate hook file — the\n *   hook \"config path\" is the same mcp.json so the generic doctor/backup behave\n *   sensibly.\n *\n * A stdio server entry is the standard `{ type:\"stdio\", command, args, env }`\n * shape. Codebuff supports native `$VAR` interpolation, so `${env:VAR}` refs are\n * rewritten to Codebuff's native `$VAR` token (rewriteEnvRefs) rather than being\n * resolved to literals — secrets are never baked into the config file.\n */\n\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nimport { BaseAdapter } from \"../base.js\";\nimport type { Adapter, InstallContext } from \"../spi.js\";\nimport type {\n  ChangeRecord,\n  DetectedPlatform,\n  HealthCheck,\n  HookParadigm,\n  PlatformCapabilities,\n  PlatformId,\n  ServerDef,\n  SubagentDef,\n  Transport,\n} from \"../../core/types.js\";\nimport { rewriteEnvRefs } from \"../../core/interpolate.js\";\nimport {\n  buildWrappedStdio,\n} from \"../../core/spawn.js\";\nimport { renderSkillMd } from \"../claude-code/render.js\";\n\nconst HOST: PlatformId = \"codebuff\";\nconst MCP_ROOT_KEY = \"mcpServers\";\n\n/**\n * Render `${env:VAR}`/`${env:VAR:-default}` into Codebuff's native `$VAR` token.\n *\n * When the portable ref carried a default (`${env:VAR:-fallback}`), Codebuff's\n * native `$VAR` token cannot express it — so a bare native token would silently\n * DROP the default. Instead, resolve the default at install time: emit the live\n * value when VAR is set and non-empty, else the literal fallback. The native\n * token is only emitted when there is no default to preserve.\n */\nconst toNativeRef = (name: string, def?: string): string => {\n  if (def !== undefined) {\n    const v = process.env[name];\n    return v != null && v !== \"\" ? v : def;\n  }\n  return `$${name}`;\n};\n\n/** Recursively rewrite every `${env:VAR}` ref in a JSON-ish value to `$VAR`. */\nfunction rewriteEnvRefsDeep<T>(value: T): T {\n  if (typeof value === \"string\") {\n    return rewriteEnvRefs(value, toNativeRef) as unknown as T;\n  }\n  if (Array.isArray(value)) {\n    return value.map((v) => rewriteEnvRefsDeep(v)) as unknown as T;\n  }\n  if (value && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(value)) out[k] = rewriteEnvRefsDeep(v);\n    return out as T;\n  }\n  return value;\n}\n\n/**\n * Render one AgentDefinition field as a `  key: value,` line for the emitted\n * `.agents/<id>.ts` module. The value is serialized with JSON.stringify (correct\n * string/array/object escaping); a known-identifier key is emitted unquoted, and\n * anything else (only reachable via `extra`) is quoted. Multi-line JSON (arrays /\n * nested objects) is reindented so it sits under the 2-space object body.\n */\nfunction renderAgentField(key: string, value: unknown): string {\n  const k = /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? key : JSON.stringify(key);\n  const json = JSON.stringify(value, null, 2);\n  const v = json.includes(\"\\n\") ? json.replace(/\\n/g, \"\\n  \") : json;\n  return `  ${k}: ${v},`;\n}\n\n/**\n * Native MCP server entry shapes Codebuff accepts under `mcpServers`.\n * A stdio entry is tagged with `type:\"stdio\"`; remote transports carry a `url`.\n */\ninterface CodebuffStdioServer {\n  type: \"stdio\";\n  command: string;\n  args?: string[];\n  env?: Record<string, string>;\n}\ninterface CodebuffHttpServer {\n  type: \"http\";\n  url: string;\n  headers?: Record<string, string>;\n}\n\nexport class CodebuffAdapter extends BaseAdapter implements Adapter {\n  readonly id: PlatformId = HOST;\n  readonly name = \"Codebuff\";\n  readonly paradigm: HookParadigm = \"mcp-only\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: AGENTS.md-first managed block via the BaseAdapter default\n    // (memoryTargets: project <projectDir>/AGENTS.md; user scope where documented).\n    supportsMemory: true,\n    // Codebuff has no lifecycle hook system — every hook capability is false.\n    preToolUse: false,\n    postToolUse: false,\n    preCompact: false,\n    sessionStart: false,\n    sessionEnd: false,\n    userPromptSubmit: false,\n    stop: false,\n    notification: false,\n    canModifyArgs: false,\n    canModifyOutput: false,\n    canInjectSessionContext: false,\n    // Codebuff registers stdio and Streamable HTTP MCP servers.\n    transports: [\"stdio\", \"http\"],\n    // Server env/url use Codebuff's NATIVE ${env:VAR} interpolation\n    // (rewriteEnvRefs) — the token survives into the config, never a baked\n    // literal — so the installer's unset-env-ref bake warn does not apply here.\n    nativeServerEnvInterpolation: true,\n    // Content surfaces: Codebuff reads AgentSkills from\n    // <configDir>/skills/<name>/SKILL.md (configDir is .agents, so the path is\n    // .agents/skills/<name>/SKILL.md). Verified against codebuff source\n    // sdk/src/skills/load-skills.ts — the frontmatter `name` MUST equal the dir\n    // name. Commands have no native Codebuff surface. Subagents ARE natively\n    // supported — executable .agents/*.ts AgentDefinition modules (codebuff docs:\n    // \"Create a new TypeScript file in .agents/\") — and are now WIRED:\n    // installSubagents emits one `.agents/<id>.ts` AgentDefinition module per\n    // declared subagent (PROJECT scope; see renderSubagent), each\n    // default-exporting the AgentDefinition object WITHOUT the type-only\n    // `agent-definition` import (erased at runtime; emitting it would only couple\n    // the module to a generated types file that may not exist).\n    supportsSkills: true,\n    supportsSubagents: true,\n  };\n\n  // ── Detection ────────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = join(homedir(), \".agents\");\n    const userMcp = join(userDir, \"mcp.json\");\n    const projDir = join(projectDir, \".agents\");\n    const projMcp = join(projDir, \"mcp.json\");\n\n    const userInstalled = existsSync(userDir) || existsSync(userMcp);\n    const projInstalled = existsSync(projDir) || existsSync(projMcp);\n    const installed = userInstalled || projInstalled;\n    // Project is the preferred scope; fall back to user when only that matched.\n    const scope = projInstalled && !userInstalled ? \"project\" : \"user\";\n    const configPath = scope === \"project\" ? projMcp : userMcp;\n\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath,\n      scope,\n      reason: installed\n        ? `found Codebuff config (${scope})`\n        : `no .agents config dir at ${userDir} or ${projDir}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ─────────────────────────────────────────────────────────\n\n  getConfigDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".agents\")\n      : join(homedir(), \".agents\");\n  }\n\n  getServerConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"mcp.json\");\n  }\n\n  /**\n   * Codebuff has no hook file — hooks are not a thing here. The hook \"config\n   * path\" is the same mcp.json so the generic doctor/backup behave sensibly.\n   */\n  getHookConfigPath(ctx: InstallContext): string {\n    return this.getServerConfigPath(ctx);\n  }\n\n  // ── MCP server install / uninstall ───────────────────────────────────────\n\n  installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST]?.server;\n    if (!connector.server || override === false) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: connector.server\n            ? \"server registration disabled for codebuff\"\n            : \"connector declares no MCP server\",\n        },\n      ];\n    }\n\n    // Shallow-merge any per-platform server override into the base ServerDef.\n    const server: ServerDef =\n      override && typeof override === \"object\"\n        ? { ...connector.server, ...override }\n        : connector.server;\n\n    const serverPath = this.getServerConfigPath(ctx);\n    const entry = this.renderServerEntry(ctx, server);\n\n    return [\n      this.upsertServerInJson(serverPath, MCP_ROOT_KEY, connector.id, entry, ctx.dryRun),\n    ];\n  }\n\n  uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const serverPath = this.getServerConfigPath(ctx);\n    return [\n      this.removeServerFromJson(serverPath, MCP_ROOT_KEY, ctx.connector.id, ctx.dryRun),\n    ];\n  }\n\n  /** Render a normalized ServerDef into Codebuff's native mcpServers entry. */\n  private renderServerEntry(\n    ctx: InstallContext,\n    server: ServerDef,\n  ): CodebuffStdioServer | CodebuffHttpServer {\n    const transport: Transport = server.transport;\n\n    if (transport === \"stdio\") {\n      let command = server.command ?? \"\";\n      let args = [...(server.args ?? [])];\n\n      // Transparent telemetry wrapping: route the real command through\n      // `<homeBin> serve --connector <id> -- <command> <args...>`.\n      ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\n\n      // Codebuff supports native `$VAR` interpolation, so rewrite every\n      // ${env:VAR} ref to `$VAR` rather than baking literals into the config.\n      const entry: CodebuffStdioServer = {\n        type: \"stdio\",\n        command: rewriteEnvRefsDeep(command),\n      };\n      if (args.length > 0) entry.args = rewriteEnvRefsDeep(args);\n      const env = this.renderEnv(server.env);\n      if (env) entry.env = env;\n      return entry;\n    }\n\n    // http (and any other remote transport) — Codebuff registers a URL.\n    const entry: CodebuffHttpServer = {\n      type: \"http\",\n      url: rewriteEnvRefsDeep(server.url ?? \"\"),\n    };\n    const headers = this.renderEnv(server.headers);\n    if (headers) entry.headers = headers;\n    return entry;\n  }\n\n  /**\n   * Render env/header values. Codebuff supports native `$VAR` interpolation, so\n   * rewrite `${env:VAR}` references to `$VAR` rather than resolving to literals.\n   */\n  private renderEnv(\n    env: Record<string, string> | undefined,\n  ): Record<string, string> | undefined {\n    if (!env || Object.keys(env).length === 0) return undefined;\n    return rewriteEnvRefsDeep({ ...env });\n  }\n\n  // ── Content surfaces: skills ──────────────────────────────────────────────\n  // CONTENT-ONLY: pure native-file writers. No runtime dispatch, no home-bin\n  // pointer, no telemetry wrap. Each method is idempotent (byte-identical →\n  // skip) via writeContentFile and reversible via removeContentFile. Honors\n  // platforms[\"codebuff\"].skills === false to skip. Both user and project scope\n  // are supported (configDir resolves per scope).\n  //\n  // Native location:\n  //   skill → <configDir>/skills/<name>/SKILL.md (+ resources)\n  //           configDir is .agents, so .agents/skills/<name>/SKILL.md. Verified\n  //           against codebuff source sdk/src/skills/load-skills.ts — the\n  //           frontmatter `name` MUST equal the dir name.\n\n  private skillDir(ctx: InstallContext, name: string): string {\n    return join(this.getConfigDir(ctx), \"skills\", name);\n  }\n\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.skills === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for codebuff\" }];\n    }\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      changes.push(\n        this.writeContentFile(join(dir, \"SKILL.md\"), renderSkillMd(skill), ctx.dryRun),\n      );\n      // Bundle any resource files beside SKILL.md (relative path → contents).\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\n      // (config-time validation already rejects these, but never trust input).\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\n          });\n          continue;\n        }\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\n      }\n    }\n    return changes;\n  }\n\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\n      // skill dir itself when we own its full contents.\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\n      for (const rel of Object.keys(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) continue; // never delete outside the skill dir\n        changes.push(this.removeContentFile(target, ctx.dryRun));\n      }\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\n      // dir that still holds user-added / sibling-tool / shared files.\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\n    }\n    return changes;\n  }\n\n  // ── Content surfaces: subagents ───────────────────────────────────────────\n  // CONTENT-ONLY: pure native-file writers (no runtime dispatch, no home-bin\n  // pointer, no telemetry wrap). Idempotent via writeContentFile, reversible via\n  // removeContentFile. Honors platforms[\"codebuff\"].subagents === false.\n  //\n  // Native location: codebuff agents are executable TypeScript modules in the\n  // PROJECT .agents/ dir — <projectDir>/.agents/<id>.ts (codebuff docs:\n  // \"Create a new TypeScript file in .agents/\"). No user-scope agents dir is\n  // documented, so user scope warn-skips (the warp/amp project-scoped precedent).\n\n  /** Native subagent module path: <configDir>/<name>.ts (= .agents/<name>.ts). */\n  private subagentPath(ctx: InstallContext, name: string): string {\n    return join(this.getConfigDir(ctx), `${name}.ts`);\n  }\n\n  override installSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.subagents === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"subagents disabled for codebuff\" }];\n    }\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    // codebuff agents live in the PROJECT .agents/ dir; no user-scope agents dir\n    // is documented, so user scope warn-skips (mirrors warp/amp project-scoped).\n    if (ctx.scope !== \"project\") {\n      return [\n        {\n          platform: this.id,\n          action: \"warn\",\n          detail:\n            \"codebuff subagents are project-scoped only (.agents/*.ts; no documented \" +\n            `user-scope agents dir); ${connector.subagents.length} skipped`,\n        },\n      ];\n    }\n    return connector.subagents.map((agent) =>\n      this.writeContentFile(\n        this.subagentPath(ctx, agent.name),\n        this.renderSubagent(agent),\n        ctx.dryRun,\n      ),\n    );\n  }\n\n  override uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    if (ctx.scope !== \"project\") {\n      return [\n        { platform: this.id, action: \"skip\", detail: \"codebuff subagents are project-scoped only\" },\n      ];\n    }\n    return connector.subagents.map((agent) =>\n      this.removeContentFile(this.subagentPath(ctx, agent.name), ctx.dryRun),\n    );\n  }\n\n  /**\n   * Render a subagent into a Codebuff `.agents/<id>.ts` AgentDefinition module:\n   *\n   *   const definition = {\n   *     id: \"<name>\",\n   *     ...\n   *   };\n   *\n   *   export default definition;\n   *\n   * Emitted WITHOUT the `import { AgentDefinition } from './types/agent-definition'`\n   * line the docs show: that import is TYPE-ONLY (erased at runtime), so omitting\n   * it avoids coupling the module to a generated types file that may not exist —\n   * a bare object literal + default export is a complete, valid AgentDefinition.\n   *\n   * Field mapping (ONLY fields AC's SubagentDef can populate; nothing fabricated):\n   *   id                 ← name (already kebab-case → a valid codebuff id)\n   *   displayName        ← name\n   *   spawnerPrompt      ← description (the delegation hint)\n   *   model              ← model        (OMITTED when the connector declares none)\n   *   toolNames          ← tools.allow  (OMITTED when none declared)\n   *   instructionsPrompt ← prompt       (the system prompt / instructions body)\n   * SubagentDef.readonly is NOT mapped: Codebuff expresses tool access through the\n   * `toolNames` allowlist and documents no read-only permission flag, and AC has no\n   * verified read-only tool taxonomy to synthesize one — so a readonly hint is\n   * carried only if the author restricts `tools.allow` themselves (or via `extra`).\n   * `extra` is merged LAST as the documented escape hatch — the only way to reach\n   * codebuff AgentDefinition fields AC does not model (version, outputMode,\n   * spawnableAgents, inputSchema, …); its values come from the connector author,\n   * never invented here.\n   */\n  private renderSubagent(agent: SubagentDef): string {\n    const def: Record<string, unknown> = {\n      id: agent.name,\n      displayName: agent.name,\n      spawnerPrompt: agent.description,\n    };\n    if (agent.model !== undefined) def.model = agent.model;\n    const allow = agent.tools?.allow;\n    if (allow && allow.length > 0) def.toolNames = [...allow];\n    def.instructionsPrompt = agent.prompt;\n    if (agent.extra) Object.assign(def, agent.extra);\n\n    const body = Object.entries(def)\n      .map(([k, v]) => renderAgentField(k, v))\n      .join(\"\\n\");\n    return `const definition = {\\n${body}\\n};\\n\\nexport default definition;\\n`;\n  }\n\n  // ── Hooks (unavailable — Codebuff is mcp-only) ────────────────────────────\n\n  installHooks(_ctx: InstallContext): ChangeRecord[] {\n    return [\n      {\n        platform: this.id,\n        action: \"skip\",\n        detail: \"hooks unavailable (Codebuff is mcp-only)\",\n      },\n    ];\n  }\n\n  uninstallHooks(_ctx: InstallContext): ChangeRecord[] {\n    return [\n      {\n        platform: this.id,\n        action: \"skip\",\n        detail: \"hooks unavailable (Codebuff is mcp-only)\",\n      },\n    ];\n  }\n\n  // ── Diagnostics ──────────────────────────────────────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const mcpPath = this.getServerConfigPath(ctx);\n    const connectorId = ctx.connector.id;\n    const checks: HealthCheck[] = [\n      {\n        name: `${this.name}: mcp.json present`,\n        check: () =>\n          existsSync(mcpPath)\n            ? { status: \"OK\", detail: mcpPath }\n            : { status: \"FAIL\", detail: `not found: ${mcpPath}` },\n      },\n      {\n        name: `${this.name}: server entry registered`,\n        check: () => {\n          // Only assert what the connector declares: a server-less connector\n          // never writes a server entry, so its absence is healthy.\n          if (!ctx.connector.server) {\n            return { status: \"OK\", detail: \"no MCP server declared\" };\n          }\n          const cfg = this.readJson<{ [k: string]: Record<string, unknown> }>(mcpPath);\n          const bucket = cfg?.[MCP_ROOT_KEY];\n          if (!cfg || !bucket) {\n            return { status: \"FAIL\", detail: `no ${MCP_ROOT_KEY} in ${mcpPath}` };\n          }\n          return connectorId in bucket\n            ? { status: \"OK\", detail: `${MCP_ROOT_KEY}.${connectorId} present` }\n            : {\n                status: \"FAIL\",\n                detail: `no ${MCP_ROOT_KEY}.${connectorId} in ${mcpPath}`,\n              };\n        },\n      },\n    ];\n\n    // Content-surface checks: assert presence only for the skills this connector\n    // declares (a skill-less connector writes none, so absence is healthy).\n    for (const skill of ctx.connector.skills) {\n      const p = join(this.skillDir(ctx, skill.name), \"SKILL.md\");\n      checks.push({\n        name: `${this.name}: skill ${skill.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    // Subagent checks: codebuff agents are PROJECT-scoped .agents/*.ts modules,\n    // so assert presence only at project scope (user scope warn-skips install).\n    if (ctx.scope === \"project\") {\n      for (const agent of ctx.connector.subagents) {\n        const p = this.subagentPath(ctx, agent.name);\n        checks.push({\n          name: `${this.name}: subagent ${agent.name} present`,\n          check: () =>\n            existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n        });\n      }\n    }\n    return checks;\n  }\n}\n\nexport const adapter = new CodebuffAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;AAqBA,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,YAAY;AAqBrB,IAAM,OAAmB;AACzB,IAAM,eAAe;AAWrB,IAAM,cAAc,CAAC,MAAc,QAAyB;AAC1D,MAAI,QAAQ,QAAW;AACrB,UAAM,IAAI,QAAQ,IAAI,IAAI;AAC1B,WAAO,KAAK,QAAQ,MAAM,KAAK,IAAI;AAAA,EACrC;AACA,SAAO,IAAI,IAAI;AACjB;AAGA,SAAS,mBAAsB,OAAa;AAC1C,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,eAAe,OAAO,WAAW;AAAA,EAC1C;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,IAAI,CAAC,MAAM,mBAAmB,CAAC,CAAC;AAAA,EAC/C;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,EAAG,KAAI,CAAC,IAAI,mBAAmB,CAAC;AACzE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AASA,SAAS,iBAAiB,KAAa,OAAwB;AAC7D,QAAM,IAAI,6BAA6B,KAAK,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;AAC3E,QAAM,OAAO,KAAK,UAAU,OAAO,MAAM,CAAC;AAC1C,QAAM,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,OAAO,MAAM,IAAI;AAC9D,SAAO,KAAK,CAAC,KAAK,CAAC;AACrB;AAkBO,IAAM,kBAAN,cAA8B,YAA+B;AAAA,EACzD,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA;AAAA,IAEhB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA,IACd,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA;AAAA,IAEzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA,IAI5B,8BAA8B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAa9B,gBAAgB;AAAA,IAChB,mBAAmB;AAAA,EACrB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,QAAQ,GAAG,SAAS;AACzC,UAAM,UAAU,KAAK,SAAS,UAAU;AACxC,UAAM,UAAU,KAAK,YAAY,SAAS;AAC1C,UAAM,UAAU,KAAK,SAAS,UAAU;AAExC,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,YAAY,iBAAiB;AAEnC,UAAM,QAAQ,iBAAiB,CAAC,gBAAgB,YAAY;AAC5D,UAAM,aAAa,UAAU,YAAY,UAAU;AAEnD,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,0BAA0B,KAAK,MAC/B,4BAA4B,OAAO,OAAO,OAAO;AAAA,MACrD,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIA,aAAa,KAA6B;AACxC,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,SAAS,IAC9B,KAAK,QAAQ,GAAG,SAAS;AAAA,EAC/B;AAAA,EAEA,oBAAoB,KAA6B;AAC/C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAkB,KAA6B;AAC7C,WAAO,KAAK,oBAAoB,GAAG;AAAA,EACrC;AAAA;AAAA,EAIA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI,GAAG;AAC5C,QAAI,CAAC,UAAU,UAAU,aAAa,OAAO;AAC3C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,SACd,8CACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SACJ,YAAY,OAAO,aAAa,WAC5B,EAAE,GAAG,UAAU,QAAQ,GAAG,SAAS,IACnC,UAAU;AAEhB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,QAAQ,KAAK,kBAAkB,KAAK,MAAM;AAEhD,WAAO;AAAA,MACL,KAAK,mBAAmB,YAAY,cAAc,UAAU,IAAI,OAAO,IAAI,MAAM;AAAA,IACnF;AAAA,EACF;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL,KAAK,qBAAqB,YAAY,cAAc,IAAI,UAAU,IAAI,IAAI,MAAM;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAGQ,kBACN,KACA,QAC0C;AAC1C,UAAM,YAAuB,OAAO;AAEpC,QAAI,cAAc,SAAS;AACzB,UAAI,UAAU,OAAO,WAAW;AAChC,UAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAIlC,OAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAI1E,YAAMA,SAA6B;AAAA,QACjC,MAAM;AAAA,QACN,SAAS,mBAAmB,OAAO;AAAA,MACrC;AACA,UAAI,KAAK,SAAS,EAAG,CAAAA,OAAM,OAAO,mBAAmB,IAAI;AACzD,YAAM,MAAM,KAAK,UAAU,OAAO,GAAG;AACrC,UAAI,IAAK,CAAAA,OAAM,MAAM;AACrB,aAAOA;AAAA,IACT;AAGA,UAAM,QAA4B;AAAA,MAChC,MAAM;AAAA,MACN,KAAK,mBAAmB,OAAO,OAAO,EAAE;AAAA,IAC1C;AACA,UAAM,UAAU,KAAK,UAAU,OAAO,OAAO;AAC7C,QAAI,QAAS,OAAM,UAAU;AAC7B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,UACN,KACoC;AACpC,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAClD,WAAO,mBAAmB,EAAE,GAAG,IAAI,CAAC;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,SAAS,KAAqB,MAAsB;AAC1D,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU,IAAI;AAAA,EACpD;AAAA,EAES,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,WAAW,OAAO;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,cAAQ;AAAA,QACN,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,cAAc,KAAK,GAAG,IAAI,MAAM;AAAA,MAC/E;AAIA,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaQ,aAAa,KAAqB,MAAsB;AAC9D,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,GAAG,IAAI,KAAK;AAAA,EAClD;AAAA,EAES,iBAAiB,KAAqC;AAC7D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,cAAc,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AAGA,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QACE,mGAC2B,UAAU,UAAU,MAAM;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK;AAAA,QACH,KAAK,aAAa,KAAK,MAAM,IAAI;AAAA,QACjC,KAAK,eAAe,KAAK;AAAA,QACzB,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EAES,mBAAmB,KAAqC;AAC/D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO;AAAA,QACL,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,6CAA6C;AAAA,MAC5F;AAAA,IACF;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,kBAAkB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;AAAA,IACvE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiCQ,eAAe,OAA4B;AACjD,UAAM,MAA+B;AAAA,MACnC,IAAI,MAAM;AAAA,MACV,aAAa,MAAM;AAAA,MACnB,eAAe,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU,OAAW,KAAI,QAAQ,MAAM;AACjD,UAAM,QAAQ,MAAM,OAAO;AAC3B,QAAI,SAAS,MAAM,SAAS,EAAG,KAAI,YAAY,CAAC,GAAG,KAAK;AACxD,QAAI,qBAAqB,MAAM;AAC/B,QAAI,MAAM,MAAO,QAAO,OAAO,KAAK,MAAM,KAAK;AAE/C,UAAM,OAAO,OAAO,QAAQ,GAAG,EAC5B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,EACtC,KAAK,IAAI;AACZ,WAAO;AAAA,EAAyB,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,EACtC;AAAA;AAAA,EAIA,aAAa,MAAsC;AACjD,WAAO;AAAA,MACL;AAAA,QACE,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA,EAEA,eAAe,MAAsC;AACnD,WAAO;AAAA,MACL;AAAA,QACE,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,UAAU,KAAK,oBAAoB,GAAG;AAC5C,UAAM,cAAc,IAAI,UAAU;AAClC,UAAM,SAAwB;AAAA,MAC5B;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,OAAO,IACd,EAAE,QAAQ,MAAM,QAAQ,QAAQ,IAChC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,OAAO,GAAG;AAAA,MAC1D;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AAGX,cAAI,CAAC,IAAI,UAAU,QAAQ;AACzB,mBAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AAAA,UAC1D;AACA,gBAAM,MAAM,KAAK,SAAmD,OAAO;AAC3E,gBAAM,SAAS,MAAM,YAAY;AACjC,cAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,mBAAO,EAAE,QAAQ,QAAQ,QAAQ,MAAM,YAAY,OAAO,OAAO,GAAG;AAAA,UACtE;AACA,iBAAO,eAAe,SAClB,EAAE,QAAQ,MAAM,QAAQ,GAAG,YAAY,IAAI,WAAW,WAAW,IACjE;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ,MAAM,YAAY,IAAI,WAAW,OAAO,OAAO;AAAA,UACzD;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAIA,eAAW,SAAS,IAAI,UAAU,QAAQ;AACxC,YAAM,IAAI,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU;AACzD,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,WAAW,MAAM,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AAGA,QAAI,IAAI,UAAU,WAAW;AAC3B,iBAAW,SAAS,IAAI,UAAU,WAAW;AAC3C,cAAM,IAAI,KAAK,aAAa,KAAK,MAAM,IAAI;AAC3C,eAAO,KAAK;AAAA,UACV,MAAM,GAAG,KAAK,IAAI,cAAc,MAAM,IAAI;AAAA,UAC1C,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,QAC9F,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAEO,IAAM,UAAU,IAAI,gBAAgB;AAC3C,IAAO,mBAAQ;","names":["entry"]}

package/dist/{codex-4LVDQXCD.js → codex-RHKQKNNG.js}

@@ -10,22 +10,22 @@ import {
 } from "./chunk-H53QZQJI.js";
 import {
   resolveEnvRefsDeep
-} from "./chunk-DBQMX75U.js";
+} from "./chunk-BEFVJ2OE.js";
 import {
   BaseAdapter,
   removeFromObjectMap,
   renderCommandMd,
   renderSkillMd,
   upsertInObjectMap
-} from "./chunk-RHML2NOB.js";
+} from "./chunk-VVFDU4IX.js";
 import {
   buildHomeBinHookCommand,
   buildWrappedStdio
-} from "./chunk-TO57WYBB.js";
-import "./chunk-ALVXORZM.js";
+} from "./chunk-HORHRHNG.js";
+import "./chunk-YYNXIUR2.js";
 import {
   ensureDir
-} from "./chunk-2HCJV6UO.js";
+} from "./chunk-IXOQDZWC.js";
 
 // src/adapters/codex/index.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";
@@ -251,14 +251,15 @@ var CodexAdapter = class extends BaseAdapter {
   // ── Install hooks (hooks.json) ──────────────────────────────────────────
   installHooks(ctx) {
     const path = this.getHookConfigPath(ctx);
-    const events = this.effectiveHookEvents(ctx);
-    const dropped = this.warnSkipHookEvents(ctx);
-    if (events.length === 0 && dropped.length === 0) {
+    const hooksOff = ctx.connector.platforms[this.id]?.hooks === false;
+    const declared = hooksOff ? [] : ctx.connector.hookEvents;
+    if (declared.length === 0) {
       return [{ platform: this.id, action: "skip", path, detail: "no hooks declared" }];
     }
+    const supported = (e) => CODEX_HOOK_EVENTS.includes(e);
     const pending = [
-      ...dropped.map((event) => ({ event, matcher: "" })),
-      ...events.map((event) => ({ event, matcher: "" }))
+      ...declared.filter((e) => !supported(e)).map((event) => ({ event, matcher: "" })),
+      ...declared.filter(supported).map((event) => ({ event, matcher: "" }))
     ];
     return this.upsertHookEntries(ctx, path, pending, this.hookDescriptor(ctx));
   }
@@ -273,14 +274,18 @@ var CodexAdapter = class extends BaseAdapter {
    * count, the warn wording, and the absent/no-match skips) is carried here so
    * the engine reproduces the prior in-adapter loop byte-for-byte.
    */
-  hookDescriptor(ctx) {
+  hookDescriptor(_ctx) {
     return {
       // Codex's server path coerces a malformed root; the hook path matches it.
       malformedPolicy: "coerce",
-      // Supported event → identity; a WARN_SKIP event (PostToolUseFailure, which
-      // is the only thing `dropped` ever contains) → undefined → warn.
+      // Supported event → identity; any other canonical event → undefined → the
+      // engine reports it (never silent), at the severity unmappedAction picks.
       mapEvent: (e) => CODEX_HOOK_EVENTS.includes(e) ? e : void 0,
       unmappedWarnDetail: (e) => `${e} has no Codex hook equivalent \u2014 skipped`,
+      // E1 newer events (PostToolUseFailure) keep the established `warn` (exit-1);
+      // the legacy SessionEnd / Notification — silently dropped before this fix —
+      // become a VISIBLE `skip` so the install exit code is unchanged for them.
+      unmappedAction: (e) => WARN_SKIP_EVENTS.has(e) ? "warn" : "skip",
       renderEntry: (event, _matcher, command) => {
         const entry = { hooks: [{ type: "command", command }] };
         entry.matcher = event === "PreToolUse" || event === "PermissionRequest" ? PRE_TOOL_USE_MATCHER : "";
@@ -695,18 +700,6 @@ var CodexAdapter = class extends BaseAdapter {
     if (!base) return void 0;
     return override ? { ...base, ...override } : base;
   }
-  /** Which canonical hook events to register for Codex, honoring overrides. */
-  effectiveHookEvents(ctx) {
-    const override = ctx.connector.platforms[this.id]?.hooks;
-    if (override === false) return [];
-    return CODEX_HOOK_EVENTS.filter((e) => ctx.connector.hookEvents.includes(e));
-  }
-  /** Declared events Codex has no analog for — install reports a warn-skip. */
-  warnSkipHookEvents(ctx) {
-    const override = ctx.connector.platforms[this.id]?.hooks;
-    if (override === false) return [];
-    return ctx.connector.hookEvents.filter((e) => WARN_SKIP_EVENTS.has(e));
-  }
   /**
    * Render the `[mcp_servers.<id>]` table. TOML has NO interpolation, so every
    * `${env:VAR}` is resolved to a literal at install time. The env table is a
@@ -763,4 +756,4 @@ export {
   adapter,
   codex_default as default
 };
-//# sourceMappingURL=codex-4LVDQXCD.js.map
+//# sourceMappingURL=codex-RHKQKNNG.js.map

package/dist/codex-RHKQKNNG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/codex/index.ts"],"sourcesContent":["/**\n * adapters/codex — Codex CLI platform adapter for agent-connector.\n *\n * Codex CLI hook paradigm is \"json-stdio\": the host pipes a JSON payload to a\n * command on stdin and reads JSON/exit-code back — the same wire protocol as\n * Claude Code (PascalCase fields, `hookSpecificOutput` reply wrapper).\n *\n * Two native config files live under the Codex config dir\n * (`$CODEX_HOME` || `~/.codex`, mirrored to `<projectDir>/.codex` for project\n * scope):\n *   - config.toml  → `[mcp_servers.<id>]` MCP registration (TOML, NO native\n *     interpolation, so env-refs are resolved to literals at install time).\n *   - hooks.json   → Claude-compatible hook registration ({ matcher, hooks }).\n *\n * Grounded in context-mode's proven Codex adapter (configs/codex/{config.toml,\n * hooks.json}, src/adapters/codex/*) — exact TOML MCP shape + hook JSON schema.\n *\n * Codex capabilities (upstream, verified against openai/codex source at the\n * stable release tags noted):\n *   - PreToolUse `updatedInput` rewrite IS honored (PR #20527, commit d08906a9,\n *     stable since codex 0.131.0; applied in the shell/mcp/apply_patch tool\n *     handlers, confirmed present through 0.141.0) — hence canModifyArgs is now\n *     TRUE. Codex's output_parser.rs requires the rewrite to be paired with\n *     `permissionDecision:\"allow\"` (an allow WITHOUT updatedInput, and an\n *     updatedInput WITHOUT allow, are both rejected as invalid), so \"modify\"\n *     emits the allow+updatedInput envelope together. The still-open tracking\n *     issue openai/codex#18491 is now scoped to a NARROWER gap — read_file/grep\n *     have no PreToolUse handler yet — not to updatedInput itself, which works\n *     for every tool that fires PreToolUse (shell/Bash, apply_patch, MCP).\n *   - PostToolUse `updatedMCPToolOutput` is still explicitly rejected as\n *     \"unsupported\" by output_parser.rs (no output-rewrite field on\n *     PostToolUseOutput at 0.141.0) — hence canModifyOutput stays FALSE.\n *\n * E1 extension events (verified against developers.openai.com/codex/hooks):\n *   - PermissionRequest — native, decision-capable via the nested\n *     hookSpecificOutput.decision{behavior:\"allow\"|\"deny\", message?} envelope.\n *     Codex docs: updatedInput / updatedPermissions / interrupt FAIL CLOSED on\n *     this event, so they are never emitted here.\n *   - SubagentStart — native; hookSpecificOutput.additionalContext is injected\n *     as developer context for the subagent (not blockable).\n *   - SubagentStop — native; the documented continuation shape is the TOP-LEVEL\n *     {\"decision\":\"block\",\"reason\"} (Stop semantics: keeps the subagent going).\n *   - PostToolUseFailure — NO Codex analog (PostToolUse only); declared hooks\n *     for it warn-skip at install and the capability flag stays unset.\n *   - PostCompact — native (Codex's hook system fires both PreCompact and\n *     PostCompact); observe-only, normalizing the `trigger` (manual|auto)\n *     exactly like PreCompact, with a passthrough formatReply.\n */\n\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nimport TOML from \"@iarna/toml\";\n\nimport type {\n  ChangeRecord,\n  DetectedPlatform,\n  HealthCheck,\n  HookEventName,\n  HookParadigm,\n  HookResponse,\n  PlatformCapabilities,\n  PlatformId,\n  ServerDef,\n  SkillDef,\n  SubagentDef,\n} from \"../../core/types.js\";\nimport { ensureDir } from \"../../core/paths.js\";\nimport { codexConfigHome } from \"../../core/host-paths.js\";\nimport { resolveEnvRefsDeep } from \"../../core/interpolate.js\";\nimport {\n  removeFromObjectMap,\n  upsertInObjectMap,\n  type ObjectMapCodec,\n} from \"../../core/object-map.js\";\nimport { writeTomlString } from \"../../core/toml.js\";\nimport {\n  buildHomeBinHookCommand,\n  buildWrappedStdio,\n} from \"../../core/spawn.js\";\nimport { renderCommandMd, renderSkillMd } from \"../claude-code/render.js\";\nimport { normalizeSessionSource } from \"../claude-code/wire.js\";\nimport { BaseAdapter, type HookMergeDescriptor } from \"../base.js\";\nimport type {\n  HookReply,\n  InstallContext,\n  MemoryTarget,\n  NormalizedEvent,\n} from \"../spi.js\";\n\n// ─────────────────────────────────────────────────────────────────────────\n// Native shapes\n// ─────────────────────────────────────────────────────────────────────────\n\n/** Raw Codex hook payload (PascalCase event, snake_case fields — Claude-style). */\ninterface CodexHookInput {\n  tool_name?: string;\n  tool_input?: Record<string, unknown>;\n  // PostToolUse only. The host serializes this as serde_json::Value (any JSON):\n  // a BARE STRING for shell/apply_patch (e.g. json!(\"shell output\")) but an\n  // OBJECT for MCP/structured tools (the serialized CallToolResult, e.g.\n  // json!({content,structuredContent,isError})) — NOT always a string. Typed\n  // `unknown` so PostToolUse coerces it for the string-typed toolOutput.\n  // Primary source: openai/codex codex-rs/hooks/src/schema.rs PostToolUseCommandInput\n  // `tool_response: Value` + core/src/tools/handlers/{mcp.rs object, shell_tests.rs string}.\n  tool_response?: unknown;\n  session_id?: string;\n  cwd?: string;\n  hook_event_name?: string;\n  source?: string;\n  prompt?: string;\n  // NO is_error: Codex's PostToolUseCommandInput struct (#[serde(deny_unknown_fields)])\n  // never serializes a top-level is_error — the error signal for MCP tools lives\n  // INSIDE tool_response as the CallToolResult `isError`. The field was removed;\n  // see derivePostToolUseIsError below. (openai/codex codex-rs/hooks/src/schema.rs:317-337)\n  stop_hook_active?: boolean;\n  trigger?: string;\n  message?: string;\n  // PostToolUseFailure-style failure field. Codex has NO failure event today;\n  // parsed defensively only (the Claude-compatible wire would carry it).\n  error?: string;\n  // SubagentStart / SubagentStop (agent_type is the matcher subject).\n  agent_id?: string;\n  agent_type?: string;\n  // SubagentStop only — the subagent's own transcript + final message.\n  agent_transcript_path?: string;\n  last_assistant_message?: string;\n}\n\n/** One hook entry inside hooks.json (Claude-compatible). */\ninterface CodexHookEntry {\n  matcher?: string;\n  hooks: Array<{ type: \"command\"; command: string }>;\n}\n\n/** Rendered `[mcp_servers.<id>]` table — string env table, no interpolation. */\ninterface CodexMcpEntry {\n  // stdio transport\n  command?: string;\n  args?: string[];\n  env?: Record<string, string>;\n  // streamable HTTP transport (remote): codex infers the transport from `url`\n  // (no explicit transport key). Verified against codex-cli 0.139.0.\n  url?: string;\n  bearer_token_env_var?: string;\n  http_headers?: Record<string, string>;\n}\n\n/**\n * Codex hook events agent-connector registers, in the canonical → native order.\n * Codex uses the same PascalCase event names as Claude Code; the home-binary\n * hook command receives the lowercased event token.\n */\nconst CODEX_HOOK_EVENTS = [\n  \"SessionStart\",\n  \"PreToolUse\",\n  \"PostToolUse\",\n  \"PreCompact\",\n  \"UserPromptSubmit\",\n  \"Stop\",\n  \"PermissionRequest\",\n  \"SubagentStart\",\n  \"SubagentStop\",\n  \"PostCompact\",\n] as const;\n\ntype CodexHookEventName = (typeof CODEX_HOOK_EVENTS)[number];\n\n/**\n * Newer E1 canonical events with NO Codex analog: Codex ships PostToolUse only —\n * there is no failure event on the live hooks page. Declared hooks for these\n * warn-skip (action `warn`, exit-1) — the established convention. The legacy\n * SessionEnd / Notification, which Codex also cannot fire, are reported as a\n * VISIBLE `skip` instead (exit-0 preserving) — see the hook descriptor's\n * `unmappedAction`. Nothing Codex cannot fire is ever silently dropped.\n */\nconst WARN_SKIP_EVENTS: ReadonlySet<HookEventName> = new Set([\"PostToolUseFailure\"]);\n\n/**\n * PreToolUse matcher — canonical Codex tool names + bare MCP tool names +\n * external MCP catch-all literal. Charset-clean ([A-Za-z0-9_|] only) so Codex's\n * Rust `regex` exact-matcher short-circuits (no look-around, which Codex\n * rejects at boot). Copied from context-mode's proven matcher.\n */\nconst PRE_TOOL_USE_MATCHER =\n  \"local_shell|shell|shell_command|exec_command|Bash|Shell|apply_patch|Edit|Write|grep_files|mcp__\";\n\n/**\n * Coerce Codex's PostToolUse `tool_response` (serde_json::Value — bare string\n * for shell/apply_patch, OBJECT for MCP/structured tools) to a string for the\n * string-typed `toolOutput`. A string passes through verbatim; everything else\n * (object/array/number/bool) is JSON-stringified; undefined/null → undefined\n * (leave `toolOutput` unset).\n *\n * Source: openai/codex codex-rs/hooks/src/schema.rs PostToolUseCommandInput\n * `tool_response: Value`; core/src/tools/handlers/shell_tests.rs emits\n * `json!(\"shell output\")` (string), mcp.rs emits `json!({...})` (object).\n */\nfunction coerceToolResponse(value: unknown): string | undefined {\n  if (value === undefined || value === null) return undefined;\n  if (typeof value === \"string\") return value;\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\n/**\n * Derive PostToolUse `isError`. Codex's PostToolUseCommandInput\n * (`#[serde(deny_unknown_fields)]`) has NO top-level is_error field, so the only\n * machine-readable error signal is the MCP CallToolResult `isError` nested in\n * the `tool_response` object (serialized camelCase by rmcp). For shell/\n * apply_patch tool_response is a bare string carrying no boolean, so we report\n * false. Returns false when no such signal exists (never invents one).\n *\n * Source: openai/codex codex-rs/hooks/src/schema.rs:317-337 (no is_error field);\n * codex-rs/core/src/tools/handlers/mcp.rs (tool_response = serialized\n * CallToolResult → `isError` when the MCP call failed).\n */\nfunction derivePostToolUseIsError(toolResponse: unknown): boolean {\n  if (toolResponse !== null && typeof toolResponse === \"object\") {\n    const flag = (toolResponse as Record<string, unknown>).isError;\n    if (typeof flag === \"boolean\") return flag;\n  }\n  return false;\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// Adapter\n// ─────────────────────────────────────────────────────────────────────────\n\nexport class CodexAdapter extends BaseAdapter {\n  readonly id: PlatformId = \"codex\";\n  readonly name = \"Codex CLI\";\n  readonly paradigm: HookParadigm = \"json-stdio\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: AGENTS.md-first managed block. memoryTargets below probes\n    // AGENTS.override.md first (it shadows AGENTS.md per directory on codex).\n    supportsMemory: true,\n    preToolUse: true,\n    postToolUse: true,\n    preCompact: true,\n    sessionStart: true,\n    sessionEnd: false,\n    userPromptSubmit: true,\n    stop: true,\n    notification: false,\n    // E1 events: PermissionRequest (decision-capable) + SubagentStart/Stop are\n    // Codex-native. postToolUseFailure stays unset — Codex has no failure event,\n    // so a declared hook for it warn-skips at install.\n    permissionRequest: true,\n    subagentStart: true,\n    subagentStop: true,\n    // PostCompact: Codex's hook system fires both PreCompact and PostCompact\n    // (developers.openai.com/codex/hooks). Observational only — the reply\n    // contract mirrors PreCompact (cannot block/modify a completed compaction).\n    postCompact: true,\n    // PreToolUse updatedInput rewrite is honored upstream (paired with\n    // permissionDecision:\"allow\"); PostToolUse output rewrite is not (see header).\n    canModifyArgs: true,\n    canModifyOutput: false,\n    canInjectSessionContext: true,\n    transports: [\"stdio\", \"http\"],\n    // Content surfaces: Codex implements all three.\n    //   command  → ~/.codex/prompts/<name>.md   (md+frontmatter, USER SCOPE ONLY)\n    //   skill    → project: .codex/skills/<name>/SKILL.md · user: ~/.agents/skills/<name>/SKILL.md\n    //   subagent → <codexDir>/agents/<name>.toml (TOML)\n    supportsCommands: true,\n    supportsSkills: true,\n    supportsSubagents: true,\n  };\n\n  // ── Detection ──────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = this.userConfigDir();\n    const projDir = join(projectDir, \".codex\");\n    const userCfg = join(userDir, \"config.toml\");\n    const projCfg = join(projDir, \"config.toml\");\n\n    const userInstalled = existsSync(userDir) || existsSync(userCfg);\n    const projInstalled = existsSync(projDir) || existsSync(projCfg);\n    const installed = userInstalled || projInstalled;\n    const scope = projInstalled && !userInstalled ? \"project\" : \"user\";\n    const configPath = scope === \"project\" ? projCfg : userCfg;\n\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath,\n      scope,\n      reason: installed\n        ? `Found Codex config dir (${scope})`\n        : `No .codex config dir at ${userDir} or ${projDir}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ───────────────────────────────────────────────────────\n\n  override getConfigDir(ctx: InstallContext): string {\n    if (ctx.scope === \"project\") return join(ctx.projectDir, \".codex\");\n    return this.userConfigDir();\n  }\n\n  override getServerConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"config.toml\");\n  }\n\n  override getHookConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"hooks.json\");\n  }\n\n  // ── Memory surface: AGENTS.override.md probe + 32 KiB doc-cap budget ─────\n  // Codex reads AGENTS.override.md > AGENTS.md per directory (one file per\n  // directory), so when the override file exists OUR block must live there or\n  // it is never loaded. Combined project docs are capped at 32 KiB\n  // (`project_doc_max_bytes`), hence the ~28 KiB per-file budget warn.\n  protected override memoryTargets(ctx: InstallContext): MemoryTarget[] {\n    // An explicit path override keeps the base resolution (escape hatch wins).\n    if (this.memoryOverride(ctx)?.path) return super.memoryTargets(ctx);\n    if (ctx.scope !== \"project\" && ctx.scope !== \"user\") return [];\n    const budgetBytes = 28 * 1024;\n    const dir = ctx.scope === \"project\" ? ctx.projectDir : this.userConfigDir();\n    const overrideMd = join(dir, \"AGENTS.override.md\");\n    if (existsSync(overrideMd)) {\n      return [\n        {\n          path: overrideMd,\n          reason: \"AGENTS.override.md shadows AGENTS.md on codex (one doc per directory)\",\n          budgetBytes,\n        },\n      ];\n    }\n    return [\n      {\n        path: join(dir, \"AGENTS.md\"),\n        reason:\n          ctx.scope === \"project\"\n            ? \"AGENTS.md standard (project root; codex is the format's originator)\"\n            : \"codex global guidance ($CODEX_HOME/AGENTS.md)\",\n        budgetBytes,\n      },\n    ];\n  }\n\n  /** `$CODEX_HOME` (tilde-expanded, then resolved) || `~/.codex` for user\n   *  scope. Shared with marketplace detection via `codexConfigHome` so the\n   *  config writer and the install probe never target different dirs. */\n  private userConfigDir(): string {\n    return codexConfigHome();\n  }\n\n  // ── TOML config IO (override JSON helpers — config.toml is TOML) ─────────\n\n  private readToml(path: string): Record<string, unknown> {\n    if (!existsSync(path)) return {};\n    try {\n      return TOML.parse(readFileSync(path, \"utf8\")) as Record<string, unknown>;\n    } catch {\n      return {};\n    }\n  }\n\n  private writeToml(path: string, data: Record<string, unknown>, dryRun: boolean): void {\n    if (dryRun) return;\n    ensureDir(dirname(path));\n    // @iarna/toml's stringify type wants its JsonMap; our object is structurally compatible.\n    writeFileSync(path, TOML.stringify(data as never), \"utf8\");\n  }\n\n  /** An ObjectMapCodec over config.toml for the core/object-map engine.\n   * `isPresentButUnparseable` is `() => false`: readToml fail-softs to {} and the\n   * server path has historically coerced/overwritten rather than warn-skip on an\n   * unparseable file — preserved here for byte-identical behavior. */\n  private tomlObjectMapCodec(): ObjectMapCodec {\n    return {\n      parse: (path) => this.readToml(path),\n      serialize: (path, data, dryRun) => this.writeToml(path, data, dryRun),\n      isPresentButUnparseable: () => false,\n    };\n  }\n\n  // ── Install server (config.toml → [mcp_servers.<id>]) ───────────────────\n\n  override installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector, dryRun } = ctx;\n    const server = this.effectiveServer(ctx);\n    const path = this.getServerConfigPath(ctx);\n\n    if (!server) {\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no server declared\" }];\n    }\n    const isStdio = server.transport === \"stdio\" && !!server.command;\n    const isHttp = server.transport === \"http\" && !!server.url;\n    if (!isStdio && !isHttp) {\n      // Codex config.toml [mcp_servers] supports stdio (command) + streamable\n      // HTTP (url). Other remote transports (sse/ws) have no codex analog.\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          path,\n          detail: `transport \"${server.transport}\" not registrable in config.toml (stdio + streamable-http only)`,\n        },\n      ];\n    }\n\n    const symlink = this.symlinkPathWarning(path);\n    if (symlink) return [symlink];\n\n    const entry = this.renderMcpEntry(ctx, server);\n\n    return [\n      upsertInObjectMap({\n        codec: this.tomlObjectMapCodec(),\n        rootKey: \"mcp_servers\",\n        policy: \"coerce\",\n        platform: this.id,\n        configPath: path,\n        entryId: connector.id,\n        entry,\n        dryRun,\n      }),\n    ];\n  }\n\n  override uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector, dryRun } = ctx;\n    const path = this.getServerConfigPath(ctx);\n    const symlink = this.symlinkPathWarning(path);\n    if (symlink) return [symlink];\n\n    return [\n      removeFromObjectMap({\n        codec: this.tomlObjectMapCodec(),\n        rootKey: \"mcp_servers\",\n        policy: \"coerce\",\n        platform: this.id,\n        configPath: path,\n        entryId: connector.id,\n        dryRun,\n      }),\n    ];\n  }\n\n  // ── Install hooks (hooks.json) ──────────────────────────────────────────\n\n  override installHooks(ctx: InstallContext): ChangeRecord[] {\n    const path = this.getHookConfigPath(ctx);\n    const hooksOff = ctx.connector.platforms[this.id]?.hooks === false;\n    const declared = hooksOff ? [] : ctx.connector.hookEvents;\n\n    if (declared.length === 0) {\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no hooks declared\" }];\n    }\n\n    // HOST-ORDERED pending: the unsupported events (mapEvent → undefined →\n    // warn/skip via the descriptor) FIRST, then the supported events in\n    // CODEX_HOOK_EVENTS order. EVERY declared event is enqueued — an event with\n    // no Codex analog is reported VISIBLY (warn for the E1 newer events, a `skip`\n    // for the legacy SessionEnd/Notification whose drop predates the convention),\n    // never silently dropped. matcher is \"\" for every item; renderEntry derives\n    // the real matcher from the event (PreToolUse/PermissionRequest).\n    const supported = (e: HookEventName) =>\n      (CODEX_HOOK_EVENTS as readonly string[]).includes(e);\n    const pending = [\n      ...declared.filter((e) => !supported(e)).map((event) => ({ event: event as string, matcher: \"\" })),\n      ...declared.filter(supported).map((event) => ({ event: event as string, matcher: \"\" })),\n    ];\n    return this.upsertHookEntries(ctx, path, pending, this.hookDescriptor(ctx));\n  }\n\n  override uninstallHooks(ctx: InstallContext): ChangeRecord[] {\n    return this.removeHookEntries(ctx, this.getHookConfigPath(ctx), this.hookDescriptor(ctx));\n  }\n\n  /**\n   * Codex hook-merge policy for the shared object-map engine. EVENT-SPECIFIC by\n   * construction: every observable (coerce root + bucket, the path-normalized\n   * per-event ownership find, the event-derived matcher with `hooks`-then-\n   * `matcher` key order, the BARE `hooks.<event>` skip/remove details with NO\n   * count, the warn wording, and the absent/no-match skips) is carried here so\n   * the engine reproduces the prior in-adapter loop byte-for-byte.\n   */\n  private hookDescriptor(_ctx: InstallContext): HookMergeDescriptor<CodexHookEntry> {\n    return {\n      // Codex's server path coerces a malformed root; the hook path matches it.\n      malformedPolicy: \"coerce\",\n      // Supported event → identity; any other canonical event → undefined → the\n      // engine reports it (never silent), at the severity unmappedAction picks.\n      mapEvent: (e) =>\n        (CODEX_HOOK_EVENTS as readonly string[]).includes(e) ? e : undefined,\n      unmappedWarnDetail: (e) => `${e} has no Codex hook equivalent — skipped`,\n      // E1 newer events (PostToolUseFailure) keep the established `warn` (exit-1);\n      // the legacy SessionEnd / Notification — silently dropped before this fix —\n      // become a VISIBLE `skip` so the install exit code is unchanged for them.\n      unmappedAction: (e) =>\n        WARN_SKIP_EVENTS.has(e as HookEventName) ? \"warn\" : \"skip\",\n      renderEntry: (event, _matcher, command) => {\n        const entry: CodexHookEntry = { hooks: [{ type: \"command\", command }] };\n        // KEY ORDER: hooks THEN matcher. Matcher is EVENT-derived, not from the\n        // connector's declared matcher: PermissionRequest matches tool names like\n        // PreToolUse (charset-clean), everything else registers \"\" (all).\n        entry.matcher =\n          event === \"PreToolUse\" || event === \"PermissionRequest\" ? PRE_TOOL_USE_MATCHER : \"\";\n        return entry;\n      },\n      // Idempotency find for the CANONICAL event the engine built `command` from —\n      // path-normalized, exact-command, the body of isOurEntry's command check.\n      entryOwnsCommand: (entry, command) =>\n        Array.isArray(entry.hooks) &&\n        entry.hooks.some(\n          (h) => (h.command ?? \"\").replace(/\\\\/g, \"/\") === command.replace(/\\\\/g, \"/\"),\n        ),\n      // FLAT whole-entry removal, EVENT-SPECIFIC: isOurEntry rebuilds our command\n      // from the event key being stripped, so a SubagentStop entry is never matched\n      // while iterating the PreToolUse bucket.\n      ownsEntryForRemove: (c, event) => (entry) =>\n        this.isOurEntry(c, event as CodexHookEventName, entry),\n      skipDetail: (e) => `hooks.${e}`,\n      removeDetail: (e, _n) => `hooks.${e}`,\n      absentDetail: \"no hooks.json\",\n      noMatchDetail: \"no agent-connector hooks present\",\n      // Uninstall scans EXACTLY codex's fixed event set (not Object.keys), so a\n      // home-bin command hand-placed under a foreign event key is left untouched —\n      // byte-identical to the prior `for (const event of CODEX_HOOK_EVENTS)` loop.\n      removeEventKeys: CODEX_HOOK_EVENTS,\n    };\n  }\n\n  // ── Health checks (default doctor renders these) ────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const path = this.getServerConfigPath(ctx);\n    const id = ctx.connector.id;\n    const checks: HealthCheck[] = [\n      {\n        name: `${this.name}: config.toml exists`,\n        check: () =>\n          existsSync(path)\n            ? { status: \"OK\", detail: path }\n            : { status: \"FAIL\", detail: `not found: ${path}` },\n      },\n      {\n        name: `${this.name}: mcp_servers.${id} registered`,\n        check: () => {\n          // Only assert what the connector declares (same rule as the\n          // content-surface checks below): a server-less connector — e.g. a\n          // catalog-only bundle of agents/skills/commands — never writes an\n          // [mcp_servers.<id>] table, so its absence is healthy.\n          if (!ctx.connector.server) {\n            return { status: \"OK\", detail: \"no MCP server declared\" };\n          }\n          const cfg = this.readToml(path);\n          const bucket = cfg[\"mcp_servers\"];\n          const present =\n            typeof bucket === \"object\" &&\n            bucket !== null &&\n            id in (bucket as Record<string, unknown>);\n          return present\n            ? { status: \"OK\", detail: `mcp_servers.${id}` }\n            : { status: \"FAIL\", detail: `mcp_servers.${id} not found in ${path}` };\n        },\n      },\n    ];\n\n    // Content-surface checks: assert presence only for surfaces this connector\n    // declares. Codex commands are user-scope only, so a project-scope install\n    // won't have written them — only check command files in user scope.\n    if (ctx.scope !== \"project\") {\n      for (const cmd of ctx.connector.commands) {\n        const p = this.commandPath(cmd.name);\n        checks.push({\n          name: `${this.name}: command ${cmd.name} present`,\n          check: () =>\n            existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n        });\n      }\n    }\n    for (const skill of ctx.connector.skills) {\n      const p = join(this.skillDir(ctx, skill.name), \"SKILL.md\");\n      checks.push({\n        name: `${this.name}: skill ${skill.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    for (const agent of ctx.connector.subagents) {\n      const p = this.subagentPath(ctx, agent.name);\n      checks.push({\n        name: `${this.name}: subagent ${agent.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    return checks;\n  }\n\n  // ── Content surfaces: commands / skills / subagents ──────────────────────\n  // CONTENT-ONLY: pure native-file writers. No runtime dispatch, no home-bin\n  // pointer, no telemetry wrap. Each method is idempotent (byte-identical →\n  // skip) via writeContentFile and reversible via removeContentFile. Honors\n  // platforms[\"codex\"] per-surface false to skip.\n  //\n  // Native locations:\n  //   command  → ~/.codex/prompts/<name>.md   md+frontmatter(description,argument-hint)\n  //              USER SCOPE ONLY — project scope yields a single \"warn\".\n  //   skill    → project: <projectDir>/.codex/skills/<name>/SKILL.md (+ resources)\n  //              user:    ~/.agents/skills/<name>/SKILL.md (~/.codex/skills is deprecated)\n  //   subagent → <codexDir>/agents/<name>.toml  TOML via writeTomlString\n\n  /** Command files always live under the USER codex dir: ~/.codex/prompts. */\n  private commandPath(name: string): string {\n    return join(this.userConfigDir(), \"prompts\", `${name}.md`);\n  }\n  private skillDir(ctx: InstallContext, name: string): string {\n    // Project scope: <projectDir>/.codex/skills/<name> — the Project config-layer\n    // skills root (codex-rs/core-skills/src/loader.rs, ConfigLayerSource::Project),\n    // NOT deprecated. User scope: $HOME/.agents/skills/<name> — codex's CURRENT\n    // user skills root. The older $CODEX_HOME/skills (~/.codex/skills) is still\n    // read but the loader labels it a \"Deprecated user skills location, kept for\n    // backward compatibility\". .agents is anchored to the OS home (home_dir), NOT\n    // $CODEX_HOME — so use homedir() here, never userConfigDir() (which honors\n    // CODEX_HOME).\n    if (ctx.scope === \"project\") return join(this.getConfigDir(ctx), \"skills\", name);\n    return join(homedir(), \".agents\", \"skills\", name);\n  }\n  private subagentPath(ctx: InstallContext, name: string): string {\n    return join(this.getConfigDir(ctx), \"agents\", `${name}.toml`);\n  }\n\n  // ── Commands (USER SCOPE ONLY) ───────────────────────────────────────────\n\n  override installCommands(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[this.id]?.commands === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"commands disabled for codex\" }];\n    }\n    if (ctx.scope === \"project\") {\n      return [{ platform: this.id, action: \"warn\", detail: \"codex commands are user-scope only\" }];\n    }\n    if (connector.commands.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\n    }\n    return connector.commands.map((cmd) =>\n      this.writeContentFile(\n        this.commandPath(cmd.name),\n        renderCommandMd(cmd, { includeToolsAndModel: false }),\n        ctx.dryRun,\n      ),\n    );\n  }\n\n  override uninstallCommands(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (ctx.scope === \"project\") {\n      return [{ platform: this.id, action: \"warn\", detail: \"codex commands are user-scope only\" }];\n    }\n    if (connector.commands.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\n    }\n    return connector.commands.map((cmd) =>\n      this.removeContentFile(this.commandPath(cmd.name), ctx.dryRun),\n    );\n  }\n\n  // ── Skills ───────────────────────────────────────────────────────────────\n\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[this.id]?.skills === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for codex\" }];\n    }\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      const rendered = renderSkillMd(skill);\n      changes.push(this.writeContentFile(join(dir, \"SKILL.md\"), rendered, ctx.dryRun));\n      // Bundle any resource files beside SKILL.md (relative path → contents).\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\n      // (config-time validation already rejects these, but never trust input).\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\n          });\n          continue;\n        }\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\n      }\n      // Migrate away an AC-owned copy at the deprecated user skills root so the\n      // skill is not double-registered after the move to ~/.agents/skills.\n      changes.push(...this.migrateDeprecatedUserSkill(ctx, skill, rendered));\n    }\n    return changes;\n  }\n\n  /**\n   * One-time, opt-out-safe migration: prior AC versions wrote user-scope skills\n   * to the now-deprecated $CODEX_HOME/skills/<name> root, which codex STILL reads\n   * (kept for backward compatibility). Once we write the same skill to the current\n   * ~/.agents/skills root, codex would register it TWICE (same frontmatter name,\n   * two User-scope roots). If a SKILL.md exists at the deprecated path AND is\n   * byte-identical to what we render — i.e. AC-owned, not hand-authored — remove\n   * it (and its now-empty dir). The content-equality guard guarantees we never\n   * delete a skill a user placed there by hand. No-op for project scope (where\n   * .codex/skills is the valid, non-deprecated Project config-layer path) and when\n   * a custom CODEX_HOME would make the deprecated path coincide with the new one.\n   */\n  private migrateDeprecatedUserSkill(\n    ctx: InstallContext,\n    skill: SkillDef,\n    rendered: string,\n  ): ChangeRecord[] {\n    if (ctx.scope === \"project\") return [];\n    const deprecated = join(this.userConfigDir(), \"skills\", skill.name, \"SKILL.md\");\n    // Never touch the file we just wrote (pathological CODEX_HOME === ~/.agents).\n    if (deprecated === join(this.skillDir(ctx, skill.name), \"SKILL.md\")) return [];\n    if (!existsSync(deprecated)) return [];\n    if (readFileSync(deprecated, \"utf8\") !== rendered) return []; // hand-authored — leave it\n    return [\n      this.removeContentFile(deprecated, ctx.dryRun),\n      this.removeDirIfEmpty(dirname(deprecated), ctx.dryRun),\n    ];\n  }\n\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\n      // skill dir itself when we own its full contents.\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\n      for (const rel of Object.keys(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) continue; // never delete outside the skill dir\n        changes.push(this.removeContentFile(target, ctx.dryRun));\n      }\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\n      // dir that still holds user-added / sibling-tool / shared files.\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\n    }\n    return changes;\n  }\n\n  // ── Subagents (TOML) ─────────────────────────────────────────────────────\n\n  override installSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[this.id]?.subagents === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"subagents disabled for codex\" }];\n    }\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.writeContentFile(this.subagentPath(ctx, agent.name), this.renderSubagent(agent), ctx.dryRun),\n    );\n  }\n\n  override uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.removeContentFile(this.subagentPath(ctx, agent.name), ctx.dryRun),\n    );\n  }\n\n  /**\n   * Render a subagent to a Codex agent TOML file:\n   *   { name, description, developer_instructions: prompt, model }.\n   * model is omitted when undefined so Codex applies its default.\n   */\n  private renderSubagent(agent: SubagentDef): string {\n    const table: Record<string, unknown> = {\n      name: agent.name,\n      description: agent.description,\n      developer_instructions: agent.prompt,\n    };\n    if (agent.model !== undefined) table.model = agent.model;\n    if (agent.extra) Object.assign(table, agent.extra);\n    return writeTomlString(table);\n  }\n\n  // ── Runtime dispatch ────────────────────────────────────────────────────\n\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\n    const input = (raw ?? {}) as CodexHookInput;\n    const base = {\n      hostPlatform: this.id,\n      connectorId: \"\",\n      sessionId: input.session_id ?? `pid-${process.ppid}`,\n      projectDir: input.cwd ?? process.env.CODEX_PROJECT_DIR ?? process.cwd(),\n      raw,\n    };\n\n    switch (event) {\n      case \"PreToolUse\":\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n        };\n      case \"PostToolUse\":\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          // tool_response is a bare string for shell/apply_patch but an OBJECT\n          // for MCP tools — coerce non-strings to JSON so the string-typed\n          // toolOutput never receives a raw object.\n          toolOutput: coerceToolResponse(input.tool_response),\n          // Codex never serializes a top-level is_error (deny_unknown_fields);\n          // the true error signal is the CallToolResult.isError nested inside\n          // tool_response for MCP tools. Derive it from there.\n          isError: derivePostToolUseIsError(input.tool_response),\n        };\n      case \"SessionStart\":\n        return { ...base, source: normalizeSessionSource(input.source) };\n      case \"SessionEnd\":\n        return { ...base, reason: input.message };\n      case \"UserPromptSubmit\":\n        return { ...base, prompt: input.prompt ?? \"\" };\n      case \"PreCompact\":\n        return { ...base, trigger: input.trigger === \"manual\" ? \"manual\" : \"auto\" };\n      case \"PostCompact\":\n        // Post-compaction sibling of PreCompact — same `trigger` normalization\n        // (manual|auto), observe-only. Codex's PostCompact payload mirrors\n        // PreCompact's; everything else rides on `raw`.\n        return { ...base, trigger: input.trigger === \"manual\" ? \"manual\" : \"auto\" };\n      case \"Stop\":\n        return { ...base, stopHookActive: input.stop_hook_active ?? false };\n      case \"Notification\":\n        return { ...base, message: input.message ?? \"\" };\n      case \"PermissionRequest\":\n        // Codex documents tool_name/tool_input (+tool_input.description); it has\n        // no permission_suggestions field, so the normalized optional stays unset.\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n        };\n      case \"PostToolUseFailure\":\n        // No Codex analog — never fired natively. Parsed defensively (Claude-\n        // compatible wire) so a manual `hook codex PostToolUseFailure` invocation\n        // still normalizes instead of throwing.\n        return {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          error: input.error ?? \"\",\n        };\n      case \"SubagentStart\":\n        return {\n          ...base,\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\n          ...(typeof input.agent_type === \"string\" ? { agentType: input.agent_type } : {}),\n        };\n      case \"SubagentStop\":\n        // agent_id/agent_type stay optional — never depend on hosts populating\n        // them on stop (the Claude-family SDK quirk).\n        return {\n          ...base,\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\n          ...(typeof input.agent_type === \"string\" ? { agentType: input.agent_type } : {}),\n          ...(typeof input.agent_transcript_path === \"string\"\n            ? { agentTranscriptPath: input.agent_transcript_path }\n            : {}),\n          ...(typeof input.last_assistant_message === \"string\"\n            ? { lastAssistantMessage: input.last_assistant_message }\n            : {}),\n          ...(typeof input.stop_hook_active === \"boolean\"\n            ? { stopHookActive: input.stop_hook_active }\n            : {}),\n        };\n    }\n  }\n\n  formatReply(event: HookEventName, response: HookResponse): HookReply {\n    // Codex (like Claude Code) reads a `hookSpecificOutput` JSON wrapper from\n    // stdout; exit code 0 = allow. Fields the host cannot honor are dropped.\n\n    // PermissionRequest uses Codex's nested decision{behavior} envelope and is\n    // the ONE event where an EXPLICIT \"allow\" is an ACTIVE grant (suppresses the\n    // approval prompt). ask/context/void → NO decision output: fall through to\n    // the normal approval flow (the prompt IS the ask). Codex docs: updatedInput\n    // / updatedPermissions / interrupt FAIL CLOSED on this event, so \"modify\"\n    // also falls through — emitting a bare allow would grant the ORIGINAL input\n    // the handler wanted rewritten.\n    if (event === \"PermissionRequest\") {\n      if (response.decision === \"deny\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PermissionRequest\",\n              decision: {\n                behavior: \"deny\",\n                message: response.reason ?? \"Blocked by hook\",\n              },\n            },\n          }),\n        };\n      }\n      if (response.decision === \"allow\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PermissionRequest\",\n              decision: { behavior: \"allow\" },\n            },\n          }),\n        };\n      }\n      return { exitCode: 0 };\n    }\n\n    // SubagentStart is observe/context-only on Codex (continue:false is parsed\n    // but does not stop the subagent): \"context\" injects additionalContext as\n    // developer context for the SUBAGENT, and a \"deny\" DEGRADES to the same\n    // shape carrying the reason.\n    if (event === \"SubagentStart\") {\n      const context =\n        response.decision === \"context\"\n          ? response.additionalContext\n          : response.decision === \"deny\"\n            ? response.reason ?? response.additionalContext\n            : undefined;\n      if (context) {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"SubagentStart\",\n              additionalContext: context,\n            },\n          }),\n        };\n      }\n      return { exitCode: 0 };\n    }\n\n    if (response.decision === \"deny\") {\n      // PreToolUse deny is honored; other events fail-open to allow.\n      if (event === \"PreToolUse\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PreToolUse\",\n              permissionDecision: \"deny\",\n              permissionDecisionReason: response.reason ?? \"Blocked by hook\",\n            },\n          }),\n        };\n      }\n      // SubagentStop deny = Stop semantics: the documented continuation shape is\n      // the TOP-LEVEL {\"decision\":\"block\",\"reason\"} (keeps the subagent going\n      // with `reason` as its next instruction).\n      if (event === \"SubagentStop\") {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            decision: \"block\",\n            reason: response.reason ?? \"Blocked by hook\",\n          }),\n        };\n      }\n      return { exitCode: 0 };\n    }\n\n    // modify → rewrite PreToolUse tool input. Codex applies `updatedInput`\n    // (PR #20527, stable since 0.131.0) but its output_parser.rs only accepts it\n    // when paired with permissionDecision:\"allow\" — emitting updatedInput alone\n    // (the Claude Code shape) is rejected as \"updatedInput without\n    // permissionDecision:allow\", and an allow alone is rejected too, so the pair\n    // is emitted together. Other events fail open (no updatedInput surface).\n    if (response.decision === \"modify\") {\n      if (event === \"PreToolUse\" && response.updatedInput) {\n        return {\n          exitCode: 0,\n          stdout: JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PreToolUse\",\n              permissionDecision: \"allow\",\n              updatedInput: response.updatedInput,\n            },\n          }),\n        };\n      }\n      return { exitCode: 0 };\n    }\n\n    // Context injection: honored on SessionStart, PostToolUse, and PreToolUse\n    // (additionalContext — PreToolUse support shipped via PR #20692, stable since\n    // codex 0.130.0; injected independent of any permission decision).\n    // (SubagentStop accepts only the common output fields — no additionalContext.)\n    if (\n      response.additionalContext &&\n      (event === \"SessionStart\" || event === \"PostToolUse\" || event === \"PreToolUse\")\n    ) {\n      return {\n        exitCode: 0,\n        stdout: JSON.stringify({\n          hookSpecificOutput: {\n            hookEventName: event,\n            additionalContext: response.additionalContext,\n          },\n        }),\n      };\n    }\n\n    // \"allow\" / unsupported-on-Codex (ask) → passthrough.\n    return { exitCode: 0 };\n  }\n\n  // ── Internal helpers ────────────────────────────────────────────────────\n\n  /** Resolve the per-platform server override into an effective ServerDef. */\n  private effectiveServer(ctx: InstallContext): ServerDef | undefined {\n    const override = ctx.connector.platforms[this.id]?.server;\n    if (override === false) return undefined;\n    const base = ctx.connector.server;\n    if (!base) return undefined;\n    return override ? { ...base, ...override } : base;\n  }\n\n  /**\n   * Render the `[mcp_servers.<id>]` table. TOML has NO interpolation, so every\n   * `${env:VAR}` is resolved to a literal at install time. The env table is a\n   * plain string→string map. Honors the telemetry serve-wrapper.\n   */\n  private renderMcpEntry(ctx: InstallContext, server: ServerDef): CodexMcpEntry {\n    // Streamable HTTP server: codex infers the transport from `url` (no explicit\n    // transport key). VERIFIED against codex-cli 0.139.0 — `codex mcp add <id>\n    // --url <U> --bearer-token-env-var <E>` writes:\n    //   [mcp_servers.<id>]\n    //   url = \"…\"\n    //   bearer_token_env_var = \"…\"   (only with bearerEnv auth)\n    // Telemetry serve-wrapping is stdio-only (remote cannot be intercepted).\n    // installServer's guard only lets stdio+command or http+url reach here, so\n    // this branch is exactly the streamable-HTTP case (lock-step with the guard).\n    if (server.transport === \"http\") {\n      const remote: CodexMcpEntry = { url: resolveEnvRefsDeep(server.url ?? \"\") };\n      if (server.auth?.type === \"bearerEnv\" && server.auth.bearerEnvVar) {\n        remote.bearer_token_env_var = server.auth.bearerEnvVar;\n      }\n      if (server.headers && Object.keys(server.headers).length > 0) {\n        const headers: Record<string, string> = {};\n        for (const [k, v] of Object.entries(resolveEnvRefsDeep(server.headers))) {\n          headers[k] = String(v);\n        }\n        remote.http_headers = headers;\n      }\n      return remote;\n    }\n    let command = server.command as string;\n    let args = [...(server.args ?? [])];\n\n    ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\n\n    // Resolve env-refs to literals (TOML cannot interpolate).\n    command = resolveEnvRefsDeep(command);\n    args = resolveEnvRefsDeep(args);\n\n    const entry: CodexMcpEntry = { command };\n    if (args.length > 0) entry.args = args;\n\n    if (server.env && Object.keys(server.env).length > 0) {\n      const env: Record<string, string> = {};\n      for (const [k, v] of Object.entries(resolveEnvRefsDeep(server.env))) {\n        env[k] = String(v);\n      }\n      entry.env = env;\n    }\n    return entry;\n  }\n\n  /**\n   * Does this hooks.json entry belong to this connector for `event`? EVENT-\n   * SPECIFIC + path-normalized exact-command match. The engine binds this per\n   * event in the uninstall (whole-entry FLAT removal) and the install idempotency\n   * find reuses its command body via the descriptor's entryOwnsCommand.\n   */\n  private isOurEntry(ctx: InstallContext, event: CodexHookEventName, entry: CodexHookEntry): boolean {\n    if (!entry || typeof entry !== \"object\" || !Array.isArray(entry.hooks)) return false;\n    const ours = buildHomeBinHookCommand(ctx.homeBinPath, \"codex\", event, ctx.connector.id);\n    const needle = ours.replace(/\\\\/g, \"/\");\n    return entry.hooks.some((h) => (h.command ?? \"\").replace(/\\\\/g, \"/\") === needle);\n  }\n}\n\nexport const adapter = new CodexAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,SAAS,YAAY,cAAc,qBAAqB;AACxD,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AAE9B,OAAO,UAAU;AAqGjB,IAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAYA,IAAM,mBAA+C,oBAAI,IAAI,CAAC,oBAAoB,CAAC;AAQnF,IAAM,uBACJ;AAaF,SAAS,mBAAmB,OAAoC;AAC9D,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAcA,SAAS,yBAAyB,cAAgC;AAChE,MAAI,iBAAiB,QAAQ,OAAO,iBAAiB,UAAU;AAC7D,UAAM,OAAQ,aAAyC;AACvD,QAAI,OAAO,SAAS,UAAW,QAAO;AAAA,EACxC;AACA,SAAO;AACT;AAMO,IAAM,eAAN,cAA2B,YAAY;AAAA,EACnC,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA,IAChB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA;AAAA;AAAA,IAId,mBAAmB;AAAA,IACnB,eAAe;AAAA,IACf,cAAc;AAAA;AAAA;AAAA;AAAA,IAId,aAAa;AAAA;AAAA;AAAA,IAGb,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA,IACzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,IAK5B,kBAAkB;AAAA,IAClB,gBAAgB;AAAA,IAChB,mBAAmB;AAAA,EACrB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,cAAc;AACnC,UAAM,UAAU,KAAK,YAAY,QAAQ;AACzC,UAAM,UAAU,KAAK,SAAS,aAAa;AAC3C,UAAM,UAAU,KAAK,SAAS,aAAa;AAE3C,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,YAAY,iBAAiB;AACnC,UAAM,QAAQ,iBAAiB,CAAC,gBAAgB,YAAY;AAC5D,UAAM,aAAa,UAAU,YAAY,UAAU;AAEnD,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,2BAA2B,KAAK,MAChC,2BAA2B,OAAO,OAAO,OAAO;AAAA,MACpD,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIS,aAAa,KAA6B;AACjD,QAAI,IAAI,UAAU,UAAW,QAAO,KAAK,IAAI,YAAY,QAAQ;AACjE,WAAO,KAAK,cAAc;AAAA,EAC5B;AAAA,EAES,oBAAoB,KAA6B;AACxD,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,aAAa;AAAA,EACnD;AAAA,EAES,kBAAkB,KAA6B;AACtD,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,YAAY;AAAA,EAClD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOmB,cAAc,KAAqC;AAEpE,QAAI,KAAK,eAAe,GAAG,GAAG,KAAM,QAAO,MAAM,cAAc,GAAG;AAClE,QAAI,IAAI,UAAU,aAAa,IAAI,UAAU,OAAQ,QAAO,CAAC;AAC7D,UAAM,cAAc,KAAK;AACzB,UAAM,MAAM,IAAI,UAAU,YAAY,IAAI,aAAa,KAAK,cAAc;AAC1E,UAAM,aAAa,KAAK,KAAK,oBAAoB;AACjD,QAAI,WAAW,UAAU,GAAG;AAC1B,aAAO;AAAA,QACL;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,QACE,MAAM,KAAK,KAAK,WAAW;AAAA,QAC3B,QACE,IAAI,UAAU,YACV,wEACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,gBAAwB;AAC9B,WAAO,gBAAgB;AAAA,EACzB;AAAA;AAAA,EAIQ,SAAS,MAAuC;AACtD,QAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,QAAI;AACF,aAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,IAC9C,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA,EAEQ,UAAU,MAAc,MAA+B,QAAuB;AACpF,QAAI,OAAQ;AACZ,cAAU,QAAQ,IAAI,CAAC;AAEvB,kBAAc,MAAM,KAAK,UAAU,IAAa,GAAG,MAAM;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,qBAAqC;AAC3C,WAAO;AAAA,MACL,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI;AAAA,MACnC,WAAW,CAAC,MAAM,MAAM,WAAW,KAAK,UAAU,MAAM,MAAM,MAAM;AAAA,MACpE,yBAAyB,MAAM;AAAA,IACjC;AAAA,EACF;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,WAAW,OAAO,IAAI;AAC9B,UAAM,SAAS,KAAK,gBAAgB,GAAG;AACvC,UAAM,OAAO,KAAK,oBAAoB,GAAG;AAEzC,QAAI,CAAC,QAAQ;AACX,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,qBAAqB,CAAC;AAAA,IACnF;AACA,UAAM,UAAU,OAAO,cAAc,WAAW,CAAC,CAAC,OAAO;AACzD,UAAM,SAAS,OAAO,cAAc,UAAU,CAAC,CAAC,OAAO;AACvD,QAAI,CAAC,WAAW,CAAC,QAAQ;AAGvB,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR;AAAA,UACA,QAAQ,cAAc,OAAO,SAAS;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,KAAK,mBAAmB,IAAI;AAC5C,QAAI,QAAS,QAAO,CAAC,OAAO;AAE5B,UAAM,QAAQ,KAAK,eAAe,KAAK,MAAM;AAE7C,WAAO;AAAA,MACL,kBAAkB;AAAA,QAChB,OAAO,KAAK,mBAAmB;AAAA,QAC/B,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,UAAU,KAAK;AAAA,QACf,YAAY;AAAA,QACZ,SAAS,UAAU;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,WAAW,OAAO,IAAI;AAC9B,UAAM,OAAO,KAAK,oBAAoB,GAAG;AACzC,UAAM,UAAU,KAAK,mBAAmB,IAAI;AAC5C,QAAI,QAAS,QAAO,CAAC,OAAO;AAE5B,WAAO;AAAA,MACL,oBAAoB;AAAA,QAClB,OAAO,KAAK,mBAAmB;AAAA,QAC/B,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,UAAU,KAAK;AAAA,QACf,YAAY;AAAA,QACZ,SAAS,UAAU;AAAA,QACnB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAAA,EAIS,aAAa,KAAqC;AACzD,UAAM,OAAO,KAAK,kBAAkB,GAAG;AACvC,UAAM,WAAW,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG,UAAU;AAC7D,UAAM,WAAW,WAAW,CAAC,IAAI,IAAI,UAAU;AAE/C,QAAI,SAAS,WAAW,GAAG;AACzB,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,oBAAoB,CAAC;AAAA,IAClF;AASA,UAAM,YAAY,CAAC,MAChB,kBAAwC,SAAS,CAAC;AACrD,UAAM,UAAU;AAAA,MACd,GAAG,SAAS,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,OAAwB,SAAS,GAAG,EAAE;AAAA,MACjG,GAAG,SAAS,OAAO,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,OAAwB,SAAS,GAAG,EAAE;AAAA,IACxF;AACA,WAAO,KAAK,kBAAkB,KAAK,MAAM,SAAS,KAAK,eAAe,GAAG,CAAC;AAAA,EAC5E;AAAA,EAES,eAAe,KAAqC;AAC3D,WAAO,KAAK,kBAAkB,KAAK,KAAK,kBAAkB,GAAG,GAAG,KAAK,eAAe,GAAG,CAAC;AAAA,EAC1F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,eAAe,MAA2D;AAChF,WAAO;AAAA;AAAA,MAEL,iBAAiB;AAAA;AAAA;AAAA,MAGjB,UAAU,CAAC,MACR,kBAAwC,SAAS,CAAC,IAAI,IAAI;AAAA,MAC7D,oBAAoB,CAAC,MAAM,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,MAI/B,gBAAgB,CAAC,MACf,iBAAiB,IAAI,CAAkB,IAAI,SAAS;AAAA,MACtD,aAAa,CAAC,OAAO,UAAU,YAAY;AACzC,cAAM,QAAwB,EAAE,OAAO,CAAC,EAAE,MAAM,WAAW,QAAQ,CAAC,EAAE;AAItE,cAAM,UACJ,UAAU,gBAAgB,UAAU,sBAAsB,uBAAuB;AACnF,eAAO;AAAA,MACT;AAAA;AAAA;AAAA,MAGA,kBAAkB,CAAC,OAAO,YACxB,MAAM,QAAQ,MAAM,KAAK,KACzB,MAAM,MAAM;AAAA,QACV,CAAC,OAAO,EAAE,WAAW,IAAI,QAAQ,OAAO,GAAG,MAAM,QAAQ,QAAQ,OAAO,GAAG;AAAA,MAC7E;AAAA;AAAA;AAAA;AAAA,MAIF,oBAAoB,CAAC,GAAG,UAAU,CAAC,UACjC,KAAK,WAAW,GAAG,OAA6B,KAAK;AAAA,MACvD,YAAY,CAAC,MAAM,SAAS,CAAC;AAAA,MAC7B,cAAc,CAAC,GAAG,OAAO,SAAS,CAAC;AAAA,MACnC,cAAc;AAAA,MACd,eAAe;AAAA;AAAA;AAAA;AAAA,MAIf,iBAAiB;AAAA,IACnB;AAAA,EACF;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,OAAO,KAAK,oBAAoB,GAAG;AACzC,UAAM,KAAK,IAAI,UAAU;AACzB,UAAM,SAAwB;AAAA,MAC5B;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,IAAI,IACX,EAAE,QAAQ,MAAM,QAAQ,KAAK,IAC7B,EAAE,QAAQ,QAAQ,QAAQ,cAAc,IAAI,GAAG;AAAA,MACvD;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI,iBAAiB,EAAE;AAAA,QACrC,OAAO,MAAM;AAKX,cAAI,CAAC,IAAI,UAAU,QAAQ;AACzB,mBAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AAAA,UAC1D;AACA,gBAAM,MAAM,KAAK,SAAS,IAAI;AAC9B,gBAAM,SAAS,IAAI,aAAa;AAChC,gBAAM,UACJ,OAAO,WAAW,YAClB,WAAW,QACX,MAAO;AACT,iBAAO,UACH,EAAE,QAAQ,MAAM,QAAQ,eAAe,EAAE,GAAG,IAC5C,EAAE,QAAQ,QAAQ,QAAQ,eAAe,EAAE,iBAAiB,IAAI,GAAG;AAAA,QACzE;AAAA,MACF;AAAA,IACF;AAKA,QAAI,IAAI,UAAU,WAAW;AAC3B,iBAAW,OAAO,IAAI,UAAU,UAAU;AACxC,cAAM,IAAI,KAAK,YAAY,IAAI,IAAI;AACnC,eAAO,KAAK;AAAA,UACV,MAAM,GAAG,KAAK,IAAI,aAAa,IAAI,IAAI;AAAA,UACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,QAC9F,CAAC;AAAA,MACH;AAAA,IACF;AACA,eAAW,SAAS,IAAI,UAAU,QAAQ;AACxC,YAAM,IAAI,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU;AACzD,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,WAAW,MAAM,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,eAAW,SAAS,IAAI,UAAU,WAAW;AAC3C,YAAM,IAAI,KAAK,aAAa,KAAK,MAAM,IAAI;AAC3C,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,cAAc,MAAM,IAAI;AAAA,QAC1C,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,YAAY,MAAsB;AACxC,WAAO,KAAK,KAAK,cAAc,GAAG,WAAW,GAAG,IAAI,KAAK;AAAA,EAC3D;AAAA,EACQ,SAAS,KAAqB,MAAsB;AAS1D,QAAI,IAAI,UAAU,UAAW,QAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU,IAAI;AAC/E,WAAO,KAAK,QAAQ,GAAG,WAAW,UAAU,IAAI;AAAA,EAClD;AAAA,EACQ,aAAa,KAAqB,MAAsB;AAC9D,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU,GAAG,IAAI,OAAO;AAAA,EAC9D;AAAA;AAAA,EAIS,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,aAAa,OAAO;AACpD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,8BAA8B,CAAC;AAAA,IACtF;AACA,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,qCAAqC,CAAC;AAAA,IAC7F;AACA,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK;AAAA,QACH,KAAK,YAAY,IAAI,IAAI;AAAA,QACzB,gBAAgB,KAAK,EAAE,sBAAsB,MAAM,CAAC;AAAA,QACpD,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EAES,kBAAkB,KAAqC;AAC9D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,qCAAqC,CAAC;AAAA,IAC7F;AACA,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK,kBAAkB,KAAK,YAAY,IAAI,IAAI,GAAG,IAAI,MAAM;AAAA,IAC/D;AAAA,EACF;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,WAAW,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,4BAA4B,CAAC;AAAA,IACpF;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,YAAM,WAAW,cAAc,KAAK;AACpC,cAAQ,KAAK,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,UAAU,IAAI,MAAM,CAAC;AAI/E,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAGA,cAAQ,KAAK,GAAG,KAAK,2BAA2B,KAAK,OAAO,QAAQ,CAAC;AAAA,IACvE;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,2BACN,KACA,OACA,UACgB;AAChB,QAAI,IAAI,UAAU,UAAW,QAAO,CAAC;AACrC,UAAM,aAAa,KAAK,KAAK,cAAc,GAAG,UAAU,MAAM,MAAM,UAAU;AAE9E,QAAI,eAAe,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU,EAAG,QAAO,CAAC;AAC7E,QAAI,CAAC,WAAW,UAAU,EAAG,QAAO,CAAC;AACrC,QAAI,aAAa,YAAY,MAAM,MAAM,SAAU,QAAO,CAAC;AAC3D,WAAO;AAAA,MACL,KAAK,kBAAkB,YAAY,IAAI,MAAM;AAAA,MAC7C,KAAK,iBAAiB,QAAQ,UAAU,GAAG,IAAI,MAAM;AAAA,IACvD;AAAA,EACF;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIS,iBAAiB,KAAqC;AAC7D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,cAAc,OAAO;AACrD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,iBAAiB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,KAAK,eAAe,KAAK,GAAG,IAAI,MAAM;AAAA,IAClG;AAAA,EACF;AAAA,EAES,mBAAmB,KAAqC;AAC/D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,kBAAkB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;AAAA,IACvE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,eAAe,OAA4B;AACjD,UAAM,QAAiC;AAAA,MACrC,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,MACnB,wBAAwB,MAAM;AAAA,IAChC;AACA,QAAI,MAAM,UAAU,OAAW,OAAM,QAAQ,MAAM;AACnD,QAAI,MAAM,MAAO,QAAO,OAAO,OAAO,MAAM,KAAK;AACjD,WAAO,gBAAgB,KAAK;AAAA,EAC9B;AAAA;AAAA,EAIA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,OAAO;AAAA,MACX,cAAc,KAAK;AAAA,MACnB,aAAa;AAAA,MACb,WAAW,MAAM,cAAc,OAAO,QAAQ,IAAI;AAAA,MAClD,YAAY,MAAM,OAAO,QAAQ,IAAI,qBAAqB,QAAQ,IAAI;AAAA,MACtE;AAAA,IACF;AAEA,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA;AAAA;AAAA;AAAA,UAIhC,YAAY,mBAAmB,MAAM,aAAa;AAAA;AAAA;AAAA;AAAA,UAIlD,SAAS,yBAAyB,MAAM,aAAa;AAAA,QACvD;AAAA,MACF,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,uBAAuB,MAAM,MAAM,EAAE;AAAA,MACjE,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,MAAM,QAAQ;AAAA,MAC1C,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,MAAM,UAAU,GAAG;AAAA,MAC/C,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,YAAY,WAAW,WAAW,OAAO;AAAA,MAC5E,KAAK;AAIH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,YAAY,WAAW,WAAW,OAAO;AAAA,MAC5E,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,gBAAgB,MAAM,oBAAoB,MAAM;AAAA,MACpE,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,WAAW,GAAG;AAAA,MACjD,KAAK;AAGH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AAAA,MACF,KAAK;AAIH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,OAAO,MAAM,SAAS;AAAA,QACxB;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,WAAW,MAAM,WAAW,IAAI,CAAC;AAAA,QAChF;AAAA,MACF,KAAK;AAGH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,WAAW,MAAM,WAAW,IAAI,CAAC;AAAA,UAC9E,GAAI,OAAO,MAAM,0BAA0B,WACvC,EAAE,qBAAqB,MAAM,sBAAsB,IACnD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,2BAA2B,WACxC,EAAE,sBAAsB,MAAM,uBAAuB,IACrD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,qBAAqB,YAClC,EAAE,gBAAgB,MAAM,iBAAiB,IACzC,CAAC;AAAA,QACP;AAAA,IACJ;AAAA,EACF;AAAA,EAEA,YAAY,OAAsB,UAAmC;AAWnE,QAAI,UAAU,qBAAqB;AACjC,UAAI,SAAS,aAAa,QAAQ;AAChC,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,UAAU;AAAA,gBACR,UAAU;AAAA,gBACV,SAAS,SAAS,UAAU;AAAA,cAC9B;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,UAAI,SAAS,aAAa,SAAS;AACjC,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,UAAU,EAAE,UAAU,QAAQ;AAAA,YAChC;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAMA,QAAI,UAAU,iBAAiB;AAC7B,YAAM,UACJ,SAAS,aAAa,YAClB,SAAS,oBACT,SAAS,aAAa,SACpB,SAAS,UAAU,SAAS,oBAC5B;AACR,UAAI,SAAS;AACX,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,mBAAmB;AAAA,YACrB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAEA,QAAI,SAAS,aAAa,QAAQ;AAEhC,UAAI,UAAU,cAAc;AAC1B,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,oBAAoB;AAAA,cACpB,0BAA0B,SAAS,UAAU;AAAA,YAC/C;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAIA,UAAI,UAAU,gBAAgB;AAC5B,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,UAAU;AAAA,YACV,QAAQ,SAAS,UAAU;AAAA,UAC7B,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAQA,QAAI,SAAS,aAAa,UAAU;AAClC,UAAI,UAAU,gBAAgB,SAAS,cAAc;AACnD,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,oBAAoB;AAAA,cACpB,cAAc,SAAS;AAAA,YACzB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAMA,QACE,SAAS,sBACR,UAAU,kBAAkB,UAAU,iBAAiB,UAAU,eAClE;AACA,aAAO;AAAA,QACL,UAAU;AAAA,QACV,QAAQ,KAAK,UAAU;AAAA,UACrB,oBAAoB;AAAA,YAClB,eAAe;AAAA,YACf,mBAAmB,SAAS;AAAA,UAC9B;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAGA,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB;AAAA;AAAA;AAAA,EAKQ,gBAAgB,KAA4C;AAClE,UAAM,WAAW,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG;AACnD,QAAI,aAAa,MAAO,QAAO;AAC/B,UAAM,OAAO,IAAI,UAAU;AAC3B,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,WAAW,EAAE,GAAG,MAAM,GAAG,SAAS,IAAI;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,eAAe,KAAqB,QAAkC;AAU5E,QAAI,OAAO,cAAc,QAAQ;AAC/B,YAAM,SAAwB,EAAE,KAAK,mBAAmB,OAAO,OAAO,EAAE,EAAE;AAC1E,UAAI,OAAO,MAAM,SAAS,eAAe,OAAO,KAAK,cAAc;AACjE,eAAO,uBAAuB,OAAO,KAAK;AAAA,MAC5C;AACA,UAAI,OAAO,WAAW,OAAO,KAAK,OAAO,OAAO,EAAE,SAAS,GAAG;AAC5D,cAAM,UAAkC,CAAC;AACzC,mBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,mBAAmB,OAAO,OAAO,CAAC,GAAG;AACvE,kBAAQ,CAAC,IAAI,OAAO,CAAC;AAAA,QACvB;AACA,eAAO,eAAe;AAAA,MACxB;AACA,aAAO;AAAA,IACT;AACA,QAAI,UAAU,OAAO;AACrB,QAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAElC,KAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAG1E,cAAU,mBAAmB,OAAO;AACpC,WAAO,mBAAmB,IAAI;AAE9B,UAAM,QAAuB,EAAE,QAAQ;AACvC,QAAI,KAAK,SAAS,EAAG,OAAM,OAAO;AAElC,QAAI,OAAO,OAAO,OAAO,KAAK,OAAO,GAAG,EAAE,SAAS,GAAG;AACpD,YAAM,MAA8B,CAAC;AACrC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,mBAAmB,OAAO,GAAG,CAAC,GAAG;AACnE,YAAI,CAAC,IAAI,OAAO,CAAC;AAAA,MACnB;AACA,YAAM,MAAM;AAAA,IACd;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,WAAW,KAAqB,OAA2B,OAAgC;AACjG,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,KAAK,EAAG,QAAO;AAC/E,UAAM,OAAO,wBAAwB,IAAI,aAAa,SAAS,OAAO,IAAI,UAAU,EAAE;AACtF,UAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;AACtC,WAAO,MAAM,MAAM,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,QAAQ,OAAO,GAAG,MAAM,MAAM;AAAA,EACjF;AACF;AAEO,IAAM,UAAU,IAAI,aAAa;AACxC,IAAO,gBAAQ;","names":[]}

package/dist/{continue-DYV5V55Y.js → continue-MNM7YVJY.js}

@@ -2,7 +2,7 @@
 import {
   readYaml,
   writeYaml
-} from "./chunk-IU42THN7.js";
+} from "./chunk-4NSU3KWX.js";
 import {
   extractSessionId,
   normalizeSessionSource,
@@ -10,17 +10,17 @@ import {
 } from "./chunk-H53QZQJI.js";
 import {
   resolveEnvRefsDeep
-} from "./chunk-DBQMX75U.js";
+} from "./chunk-BEFVJ2OE.js";
 import {
   BaseAdapter
-} from "./chunk-RHML2NOB.js";
+} from "./chunk-VVFDU4IX.js";
 import {
   buildHomeBinHookCommand,
   buildWrappedStdio,
   isHomeBinHookCommand
-} from "./chunk-TO57WYBB.js";
-import "./chunk-ALVXORZM.js";
-import "./chunk-2HCJV6UO.js";
+} from "./chunk-HORHRHNG.js";
+import "./chunk-YYNXIUR2.js";
+import "./chunk-IXOQDZWC.js";
 
 // src/adapters/continue/index.ts
 import { existsSync, statSync } from "fs";
@@ -769,4 +769,4 @@ export {
   adapter,
   continue_default as default
 };
-//# sourceMappingURL=continue-DYV5V55Y.js.map
+//# sourceMappingURL=continue-MNM7YVJY.js.map

package/dist/{copilot-cli-NVFXFLUF.js → copilot-cli-SMTX5F65.js}

@@ -4,19 +4,19 @@ import {
 } from "./chunk-H53QZQJI.js";
 import {
   resolveEnvRefsDeep
-} from "./chunk-DBQMX75U.js";
+} from "./chunk-BEFVJ2OE.js";
 import {
   BaseAdapter,
   renderSkillMd,
   renderSubagentMd
-} from "./chunk-RHML2NOB.js";
+} from "./chunk-VVFDU4IX.js";
 import {
   buildHomeBinHookCommand,
   buildWrappedStdio,
   isHomeBinHookCommand
-} from "./chunk-TO57WYBB.js";
-import "./chunk-ALVXORZM.js";
-import "./chunk-2HCJV6UO.js";
+} from "./chunk-HORHRHNG.js";
+import "./chunk-YYNXIUR2.js";
+import "./chunk-IXOQDZWC.js";
 
 // src/adapters/copilot-cli/index.ts
 import { existsSync } from "fs";
@@ -84,11 +84,17 @@ var CopilotCliAdapter = class extends BaseAdapter {
     permissionRequest: false,
     postToolUseFailure: false,
     subagentStart: false,
-    // PreToolUse is fail-closed and can rewrite tool input (updatedInput); a
-    // PostToolUse hook cannot rewrite already-emitted tool output.
+    // PreToolUse is fail-closed and can rewrite tool input (the host reads a
+    // flat top-level `modifiedArgs`); a PostToolUse hook cannot rewrite
+    // already-emitted tool output.
     canModifyArgs: true,
     canModifyOutput: false,
-    canInjectSessionContext: true,
+    // DEMOTED to false (fail-safe): the installed CLI 1.0.63 bundle has NO
+    // additionalContext mechanism — the token appears zero times in app.js, so a
+    // context-injection reply (SessionStart/PreCompact/etc.) is a silent no-op.
+    // Claiming the capability would advertise an injection path the host never
+    // honors; re-promote once a verified bundle ships an additionalContext reader.
+    canInjectSessionContext: false,
     // Copilot CLI's mcp-config.json `type` accepts stdio (written "local"),
     // http (Streamable HTTP), and sse (legacy) — per GitHub's add-mcp-servers docs.
     transports: ["stdio", "http", "sse"],
@@ -580,17 +586,17 @@ var CopilotCliAdapter = class extends BaseAdapter {
       case "PreToolUse": {
         const ev = {
           ...base,
-          toolName: input.tool_name ?? "",
-          toolInput: input.tool_input ?? {}
+          toolName: toolNameOf(input),
+          toolInput: toolInputOf(input)
         };
         return ev;
       }
       case "PostToolUse": {
-        const toolOutput = input.tool_result?.text_result_for_llm;
+        const toolOutput = input.toolResult?.textResultForLlm ?? input.tool_result?.text_result_for_llm;
         const ev = {
           ...base,
-          toolName: input.tool_name ?? "",
-          toolInput: input.tool_input ?? {},
+          toolName: toolNameOf(input),
+          toolInput: toolInputOf(input),
           ...typeof toolOutput === "string" ? { toolOutput } : {}
         };
         return ev;
@@ -644,16 +650,16 @@ var CopilotCliAdapter = class extends BaseAdapter {
       case "PermissionRequest": {
         const ev = {
           ...base,
-          toolName: input.tool_name ?? "",
-          toolInput: input.tool_input ?? {}
+          toolName: toolNameOf(input),
+          toolInput: toolInputOf(input)
         };
         return ev;
       }
       case "PostToolUseFailure": {
         const ev = {
           ...base,
-          toolName: input.tool_name ?? "",
-          toolInput: input.tool_input ?? {},
+          toolName: toolNameOf(input),
+          toolInput: toolInputOf(input),
           error: typeof input.error === "string" ? input.error : ""
         };
         return ev;
@@ -717,6 +723,24 @@ var CopilotCliAdapter = class extends BaseAdapter {
       }
       return { exitCode: 0 };
     }
+    if (event === "PreToolUse") {
+      if (decision === "deny") {
+        return this.stdout({
+          permissionDecision: "deny",
+          permissionDecisionReason: response.reason ?? "Blocked by hook"
+        });
+      }
+      if (decision === "ask") {
+        return this.stdout({
+          permissionDecision: "ask",
+          permissionDecisionReason: response.reason ?? "Confirmation required by hook"
+        });
+      }
+      if (decision === "modify" && response.updatedInput) {
+        return this.stdout({ modifiedArgs: response.updatedInput });
+      }
+      return { exitCode: 0 };
+    }
     if (decision === "deny") {
       if (event === "SubagentStop") {
         return this.stdout({
@@ -741,13 +765,6 @@ var CopilotCliAdapter = class extends BaseAdapter {
         }
       });
     }
-    if (decision === "modify") {
-      if (event === "PreToolUse" && response.updatedInput) {
-        return this.stdout({
-          hookSpecificOutput: { hookEventName, updatedInput: response.updatedInput }
-        });
-      }
-    }
     if (decision === "context" && response.additionalContext) {
       return this.stdout({
         hookSpecificOutput: { hookEventName, additionalContext: response.additionalContext }
@@ -764,11 +781,37 @@ function extractSessionId(input) {
     const m = input.transcript_path.match(/([a-f0-9-]{36})\.jsonl$/);
     if (m && m[1]) return m[1];
   }
+  if (typeof input.sessionId === "string" && input.sessionId !== "") {
+    return input.sessionId;
+  }
   if (typeof input.session_id === "string" && input.session_id !== "") {
     return input.session_id;
   }
   return "";
 }
+function toolNameOf(input) {
+  if (typeof input.toolName === "string") return input.toolName;
+  if (typeof input.tool_name === "string") return input.tool_name;
+  return "";
+}
+function toolInputOf(input) {
+  const raw = input.toolArgs;
+  if (typeof raw === "string") {
+    try {
+      const parsed = JSON.parse(raw);
+      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+        return parsed;
+      }
+    } catch {
+    }
+  } else if (raw && typeof raw === "object" && !Array.isArray(raw)) {
+    return raw;
+  }
+  if (input.tool_input && typeof input.tool_input === "object") {
+    return input.tool_input;
+  }
+  return {};
+}
 var adapter = new CopilotCliAdapter();
 var copilot_cli_default = adapter;
 export {
@@ -776,4 +819,4 @@ export {
   adapter,
   copilot_cli_default as default
 };
-//# sourceMappingURL=copilot-cli-NVFXFLUF.js.map
+//# sourceMappingURL=copilot-cli-SMTX5F65.js.map