@mozole/cli 1.3.1 → 1.4.0

package/dist/version.js

@@ -1,4 +1,4 @@
-export const CLI_VERSION = "1.3.1";
+export const CLI_VERSION = "1.4.0";
 export const TOOLCHAIN = Object.freeze({
     schemaVersion: 1,
     mozoleCli: CLI_VERSION,

package/docs/agent-audit.md

@@ -0,0 +1,24 @@
+# Agent integration audit — 1.4.0
+
+## Findings and changes
+
+1. Default scaffold removed agent files but still serialized CCE/governor/telemetry settings and CCE toolchain metadata. Its CLI dependency also installed optimization code. Plain output now contains neither that metadata nor the CLI dependency; project scripts run independently. Regression tests scan generated files and installed dependency locks.
+2. Verification and QA loaded fingerprints and wrote governor state even when the governor was disabled. Both paths now bypass that work unless explicitly enabled. Repeated-run tests assert no state or telemetry files are created.
+3. Default adoption installed CCE integrations without flags. Plain adoption now uses standalone scripts and basic guidance. Explicit `--cce-install` selects managed integration adoption. Already optimized projects require that flag for updates; user integrations are not silently deleted.
+4. AGENTS.md was absent by default, depriving agents of useful commands and architecture. Plain projects now include concise, integration-free guidance. CLAUDE.md imports it with `@AGENTS.md`. Tests check that every documented npm command actually exists, including PHP commands.
+5. PreToolUse matchers did not observe CCE MCP retrieval. Optional hooks now register matching PostToolUse handlers. Retrieval is recorded after execution; explicit tool-error responses are ignored. PreToolUse retains read/command enforcement.
+6. Existing managed instruction blocks and hook groups were skipped during adoption, preserving obsolete policies. They now update idempotently while preserving unowned content and handlers. An unclosed managed block fails instead of truncating user text.
+7. The visual workflow called a command that could be rejected after successful normal QA. It now supplies `--reason=explicit-workflow`.
+8. README described enforcing hooks as advisory-only. Documentation now reflects denial behavior and host trust requirements.
+
+## Scope and evidence
+
+- Tested generated guidance, hook event wiring, successful/error retrieval handling, default/adopt isolation, repeated verification/QA without state, and preservation/idempotency.
+- Plain frontend and PHP projects are built and browser-tested using their own npm scripts. Optimized smoke covers managed workspace files and CLI QA; it deliberately skips live CCE indexing.
+- AGENTS.md is instruction input, not proof that an agent has followed it. Nested `AGENTS.override.md`, host settings, and hook trust can change behavior. Codex/Claude/Antigravity interactive host sessions were not launched as part of this audit. The tests validate generated contracts and executable hook handlers, not every host's activation state.
+- An unavailable optional CCE runtime is reported during creation; enabling the integration is not a claim that indexing succeeded. Repair commands are printed.
+
+## Primary references checked
+
+- [Codex AGENTS.md discovery and scope](https://learn.chatgpt.com/docs/agent-configuration/agents-md): root-to-current-directory discovery; overrides and size limits.
+- [Codex hooks](https://learn.chatgpt.com/docs/hooks): PreToolUse/PostToolUse matchers, MCP coverage, permission decisions, and project hook trust.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mozole/cli",
-  "version": "1.3.1",
-  "description": "Static-first React Router bootstrap and agent harness",
+  "version": "1.4.0",
+  "description": "React + Vite project scaffolder with optional PHP backend and explicit agent integrations",
   "type": "module",
   "bin": {
     "mozole": "dist/cli.js"
@@ -9,8 +9,13 @@
   "files": [
     "dist",
     "README.md",
+    "CHANGELOG.md",
+    "docs/agent-audit.md",
     "LICENSE"
   ],
+  "publishConfig": {
+    "access": "public"
+  },
   "engines": {
     "node": ">=22"
   },

package/dist/scaffold/admin.d.ts

@@ -1,8 +0,0 @@
-import type { MozoleConfig } from "../config/project.js";
-export interface AdminScaffoldInspection {
-    enabled: boolean;
-    healthy: boolean;
-    detail: string;
-}
-export declare function inspectAdminScaffold(root: string, config: MozoleConfig): Promise<AdminScaffoldInspection>;
-//# sourceMappingURL=admin.d.ts.map

package/dist/scaffold/admin.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/scaffold/admin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,uBAAuB,CAAC,CAkDlC"}

package/dist/scaffold/admin.js

@@ -1,45 +0,0 @@
-import { readFile } from "node:fs/promises";
-import path from "node:path";
-export async function inspectAdminScaffold(root, config) {
-    if (!config.admin?.enabled)
-        return { enabled: false, healthy: true, detail: "static-only project" };
-    const requiredFiles = [
-        "app/admin/session.server.ts",
-        "app/admin/layout.tsx",
-        "app/admin/login.tsx",
-        "app/admin/dashboard.tsx",
-    ];
-    try {
-        const [routerConfig, routes, packageText, ...adminFiles] = await Promise.all([
-            readFile(path.join(root, "react-router.config.ts"), "utf8"),
-            readFile(path.join(root, "app", "routes.ts"), "utf8"),
-            readFile(path.join(root, "package.json"), "utf8"),
-            ...requiredFiles.map((relative) => readFile(path.join(root, ...relative.split("/")), "utf8")),
-        ]);
-        const pkg = JSON.parse(packageText);
-        const prerendered = ["/", "/about", "/contact"].every((route) => routerConfig.includes(`"${route}"`));
-        const healthy = /ssr:\s*true/.test(routerConfig) &&
-            prerendered &&
-            !routerConfig.includes('"/admin"') &&
-            routes.includes('route("admin"') &&
-            routes.includes('route("admin/login"') &&
-            adminFiles.every((contents) => contents.length > 0) &&
-            Boolean(pkg.dependencies?.["@react-router/serve"]) &&
-            pkg.scripts?.start === "react-router-serve build/server/index.js";
-        return {
-            enabled: true,
-            healthy,
-            detail: healthy
-                ? "Node runtime required; /admin excluded from prerender"
-                : "admin runtime files or hybrid rendering config are incomplete",
-        };
-    }
-    catch (error) {
-        return {
-            enabled: true,
-            healthy: false,
-            detail: `admin runtime files missing: ${error instanceof Error ? error.message : String(error)}`,
-        };
-    }
-}
-//# sourceMappingURL=admin.js.map

package/dist/scaffold/admin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/scaffold/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,MAAoB;IAEpB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO;QACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAE1E,MAAM,aAAa,GAAG;QACpB,6BAA6B;QAC7B,sBAAsB;QACtB,qBAAqB;QACrB,yBAAyB;KAC1B,CAAC;IACF,IAAI,CAAC;QACH,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC,GACtD,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC;YAC3D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC;YACjD,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAC1D;SACF,CAAC,CAAC;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAGjC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9D,YAAY,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,CACpC,CAAC;QACF,MAAM,OAAO,GACX,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;YAChC,WAAW;YACX,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YAClC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC;YAChC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YACtC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,qBAAqB,CAAC,CAAC;YAClD,GAAG,CAAC,OAAO,EAAE,KAAK,KAAK,0CAA0C,CAAC;QACpE,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;YACP,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,uDAAuD;gBACzD,CAAC,CAAC,+DAA+D;SACpE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACjG,CAAC;IACJ,CAAC;AACH,CAAC"}