@orchid-labs/pluxx 0.1.20 → 0.1.21

package/dist/cli/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAUA,OAAO,EAAuE,KAAK,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AA+B3I,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;AAElE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,WAAW,EAAE,CAAA;IACrB,gBAAgB,CAAC,EAAE,2BAA2B,CAAA;CAC/C;AAuCD,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AA4qED,wBAAsB,cAAc,CAClC,OAAO,GAAE,MAAsB,EAC/B,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,YAAY,CAAC,CAkEvB;AAED,wBAAsB,aAAa,CAAC,OAAO,GAAE,MAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAkF1F;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAyB5D"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAUA,OAAO,EAAuE,KAAK,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AA+B3I,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;AAElE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,WAAW,EAAE,CAAA;IACrB,gBAAgB,CAAC,EAAE,2BAA2B,CAAA;CAC/C;AAuCD,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AA+qED,wBAAsB,cAAc,CAClC,OAAO,GAAE,MAAsB,EAC/B,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,YAAY,CAAC,CAkEvB;AAED,wBAAsB,aAAa,CAAC,OAAO,GAAE,MAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAkF1F;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAyB5D"}

package/dist/cli/index.js

@@ -5386,9 +5386,9 @@ var Generator = class {
     for (const configPath of this.config.passthrough ?? []) {
       const src = this.resolveConfigPath(configPath, "passthrough");
       if (!existsSync4(src)) continue;
-      const basename10 = src.split("/").filter(Boolean).pop();
-      if (!basename10) continue;
-      this.copyDir(configPath, `${basename10}/`, "passthrough");
+      const basename11 = src.split("/").filter(Boolean).pop();
+      if (!basename11) continue;
+      this.copyDir(configPath, `${basename11}/`, "passthrough");
     }
   }
   /** Build canonical MCP server configs for target-specific output shaping. */
@@ -6151,18 +6151,18 @@ function getRuntimeReadinessCapability(platform, pluginRootVar = "PLUGIN_ROOT")
           {
             gate: "session-start",
             event: "SessionStart",
-            command: "node ./.codex/pluxx-readiness.mjs session-start"
+            command: `node "\${${pluginRootVar}}/.codex/pluxx-readiness.mjs" session-start`
           },
           {
             gate: "mcp-gate",
             event: "PreToolUse",
             matcher: "MCP",
-            command: "node ./.codex/pluxx-readiness.mjs mcp-gate"
+            command: `node "\${${pluginRootVar}}/.codex/pluxx-readiness.mjs" mcp-gate`
           },
           {
             gate: "prompt-gate",
             event: "UserPromptSubmit",
-            command: "node ./.codex/pluxx-readiness.mjs prompt-gate"
+            command: `node "\${${pluginRootVar}}/.codex/pluxx-readiness.mjs" prompt-gate`
           }
         ],
         notes: CODEX_EXTERNAL_NOTE
@@ -6378,6 +6378,9 @@ function shellSingleQuote(value) {
   return `'${value.replace(/'/g, `'"'"'`)}'`;
 }
 function buildHookCommandWrapperScript(command2, pluginRootVar, envFileVar) {
+  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(pluginRootVar)) {
+    throw new Error(`Invalid plugin root environment variable name: ${pluginRootVar}`);
+  }
   const serializedCommand = shellSingleQuote(command2);
   const exportLoader = [
     'import { readFileSync } from "node:fs"',
@@ -6406,6 +6409,8 @@ function buildHookCommandWrapperScript(command2, pluginRootVar, envFileVar) {
     "set -euo pipefail",
     "",
     `PLUXX_PLUGIN_ROOT="\${${pluginRootVar}:-$(cd "$(dirname "$0")/.." && pwd)}"`,
+    `export ${pluginRootVar}="$PLUXX_PLUGIN_ROOT"`,
+    'export PLUGIN_ROOT="$PLUXX_PLUGIN_ROOT"',
     'PLUXX_USER_CONFIG_PATH="$PLUXX_PLUGIN_ROOT/.pluxx-user.json"',
     "",
     'if [ -f "$PLUXX_USER_CONFIG_PATH" ]; then',
@@ -10145,7 +10150,7 @@ var CodexGenerator = class extends Generator {
   }
   async generateHooksCompanion() {
     const readinessPlan = getRuntimeReadinessPlan(this.config.readiness);
-    const readinessCapability = getRuntimeReadinessCapability("codex");
+    const readinessCapability = getRuntimeReadinessCapability("codex", "CODEX_PLUGIN_ROOT");
     if (!this.config.hooks && !readinessPlan.hasReadiness) return;
     const hooks = {};
     const unsupported = [];
@@ -10193,12 +10198,12 @@ var CodexGenerator = class extends Generator {
         const relativePath = `hooks/pluxx-hook-command-${nextWrapperIndex}.sh`;
         await this.writeFile(
           relativePath,
-          buildHookCommandWrapperScript(entry.command.replace("${PLUGIN_ROOT}", "."), "CODEX_PLUGIN_ROOT")
+          buildHookCommandWrapperScript(entry.command.replace("${PLUGIN_ROOT}", "${PLUXX_PLUGIN_ROOT}"), "CODEX_PLUGIN_ROOT")
         );
         const matcher = typeof entry.matcher === "string" && isHookFieldPreserved("codex", "matcher", codexEvent) ? entry.matcher : void 0;
         mappedEntries.push(this.buildCodexCommandHookGroup(
           codexEvent,
-          `bash ./${relativePath}`,
+          `bash "\${CODEX_PLUGIN_ROOT}/${relativePath}"`,
           matcher,
           entry.timeout
         ));
@@ -10227,7 +10232,7 @@ var CodexGenerator = class extends Generator {
   }
   async generateReadinessCompanion() {
     const readinessPlan = getRuntimeReadinessPlan(this.config.readiness);
-    const readinessCapability = getRuntimeReadinessCapability("codex");
+    const readinessCapability = getRuntimeReadinessCapability("codex", "CODEX_PLUGIN_ROOT");
     if (!readinessPlan.hasReadiness || !this.config.readiness) return;
     const translatedHooks = Object.fromEntries(
       getEnabledRuntimeReadinessBindings(readinessCapability, readinessPlan).map((binding) => [
@@ -17987,10 +17992,10 @@ ${additions.map((block) => `- ${block.replace(/\n/g, "\n  ")}`).join("\n")}
 import { spawn as spawn3, spawnSync as spawnSync2 } from "child_process";
 import { accessSync, constants, existsSync as existsSync24, lstatSync as lstatSync3, readFileSync as readFileSync14, readdirSync as readdirSync10, realpathSync } from "fs";
 import { homedir as homedir2 } from "os";
-import { basename as basename6, dirname as dirname7, resolve as resolve20 } from "path";
+import { basename as basename7, dirname as dirname7, resolve as resolve20 } from "path";
 
 // src/cli/install.ts
-import { resolve as resolve19, dirname as dirname6 } from "path";
+import { resolve as resolve19, dirname as dirname6, basename as basename6, relative as relative11 } from "path";
 import { existsSync as existsSync23, symlinkSync, mkdirSync as mkdirSync4, rmSync as rmSync3, readFileSync as readFileSync13, writeFileSync as writeFileSync4, cpSync as cpSync3, readdirSync as readdirSync9 } from "fs";
 import { spawnSync } from "child_process";
 import * as readline2 from "readline";
@@ -18676,7 +18681,7 @@ function resolveBundleReference(rootDir, value) {
   if (isRelativeBundlePath(value)) {
     return resolve19(rootDir, value);
   }
-  const pluginRootMatch = value.match(/^\$\{(?:CLAUDE_PLUGIN_ROOT|CURSOR_PLUGIN_ROOT|PLUGIN_ROOT)\}[\\/](.+)$/);
+  const pluginRootMatch = value.match(/^\$\{(?:CLAUDE_PLUGIN_ROOT|CURSOR_PLUGIN_ROOT|CODEX_PLUGIN_ROOT|OPENCODE_PLUGIN_ROOT|PLUGIN_ROOT|PLUXX_PLUGIN_ROOT)\}[\\/](.+)$/);
   if (pluginRootMatch) {
     return resolve19(rootDir, pluginRootMatch[1]);
   }
@@ -18719,9 +18724,43 @@ function collectHookCommandStrings(value, commands) {
   }
 }
 function extractBundleCommandTargets(command2) {
-  const matches = command2.match(/\$\{(?:CLAUDE_PLUGIN_ROOT|CURSOR_PLUGIN_ROOT|PLUGIN_ROOT)\}[\\/][^\s"'`;$|&<>]+|\.\.?[\\/][^\s"'`;$|&<>]+/g);
+  const matches = command2.match(/\$\{(?:CLAUDE_PLUGIN_ROOT|CURSOR_PLUGIN_ROOT|CODEX_PLUGIN_ROOT|OPENCODE_PLUGIN_ROOT|PLUGIN_ROOT|PLUXX_PLUGIN_ROOT)\}[\\/][^\s"'`;$|&<>]+|\.\.?[\\/][^\s"'`;$|&<>]+/g);
   return matches ?? [];
 }
+function extractRelativeBundleCommandTargets(command2) {
+  return extractBundleCommandTargets(command2).filter(isRelativeBundlePath);
+}
+function commandChangesToKnownPluginRoot(command2) {
+  return /\bcd\s+["']?\$\{?(?:CLAUDE_PLUGIN_ROOT|CURSOR_PLUGIN_ROOT|CODEX_PLUGIN_ROOT|OPENCODE_PLUGIN_ROOT|PLUGIN_ROOT|PLUXX_PLUGIN_ROOT)\}?/.test(command2);
+}
+function formatBundleRelativePath(rootDir, filePath) {
+  const relativePath = relative11(rootDir, filePath);
+  return relativePath && !relativePath.startsWith("..") ? relativePath : filePath;
+}
+function findHookWrapperPaths(rootDir, command2) {
+  return extractBundleCommandTargets(command2).map((target) => resolveBundleReference(rootDir, target)).filter((target) => {
+    if (!target) return false;
+    return existsSync23(target) && basename6(target).startsWith("pluxx-hook-command-") && target.endsWith(".sh");
+  });
+}
+function findCodexCwdUnsafeHookCommands(rootDir, commands) {
+  const issues = /* @__PURE__ */ new Set();
+  for (const command2 of commands) {
+    const relativeTargets = extractRelativeBundleCommandTargets(command2);
+    if (relativeTargets.length > 0 && !commandChangesToKnownPluginRoot(command2)) {
+      issues.add(`${command2} uses cwd-relative bundle target(s): ${relativeTargets.join(", ")}`);
+    }
+    for (const wrapperPath of findHookWrapperPaths(rootDir, command2)) {
+      const wrapper = readFileSync13(wrapperPath, "utf-8");
+      const hookCommand = wrapper.match(/^PLUXX_HOOK_COMMAND=(.*)$/m)?.[1] ?? "";
+      const wrapperRelativeTargets = extractRelativeBundleCommandTargets(hookCommand);
+      if (wrapperRelativeTargets.length > 0 && !commandChangesToKnownPluginRoot(wrapper)) {
+        issues.add(`${formatBundleRelativePath(rootDir, wrapperPath)} evaluates cwd-relative bundle target(s): ${wrapperRelativeTargets.join(", ")}`);
+      }
+    }
+  }
+  return [...issues].sort();
+}
 function resolveInstalledHooksReference(rootDir, platform, manifest) {
   const manifestReference = typeof manifest.hooks === "string" ? manifest.hooks : void 0;
   if (manifestReference) {
@@ -18759,6 +18798,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
     return {
       missingManifestPaths: [],
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: []
     };
   }
@@ -18768,6 +18808,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
       manifestIssue: `missing plugin manifest at ${manifestPath}`,
       missingManifestPaths: [],
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: []
     };
   }
@@ -18779,6 +18820,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
       manifestIssue: `plugin manifest at ${manifestPath} is not parseable: ${error instanceof Error ? error.message : String(error)}`,
       missingManifestPaths: [],
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: []
     };
   }
@@ -18793,6 +18835,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
       ...manifestIssue ? { manifestIssue } : {},
       missingManifestPaths,
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: findInstalledRuntimeScriptIssues(rootDir, manifest)
     };
   }
@@ -18801,6 +18844,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
       ...manifestIssue ? { manifestIssue } : {},
       missingManifestPaths,
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: findInstalledRuntimeScriptIssues(rootDir, manifest)
     };
   }
@@ -18814,10 +18858,12 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
         return resolved !== void 0 && !existsSync23(resolved);
       })
     )].sort();
+    const cwdUnsafeHookCommands = platform === "codex" ? findCodexCwdUnsafeHookCommands(rootDir, commands) : [];
     return {
       ...manifestIssue ? { manifestIssue } : {},
       missingManifestPaths,
       missingHookTargets,
+      cwdUnsafeHookCommands,
       invalidRuntimeScripts: findInstalledRuntimeScriptIssues(rootDir, manifest)
     };
   } catch (error) {
@@ -18826,6 +18872,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
       hookConfigIssue: `hooks config at ${hooksReference} is not parseable: ${error instanceof Error ? error.message : String(error)}`,
       missingManifestPaths,
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: findInstalledRuntimeScriptIssues(rootDir, manifest)
     };
   }
@@ -18875,6 +18922,9 @@ function assertInstalledBundleIntegrity(rootDir, platform, label) {
   if (issues.missingHookTargets.length > 0) {
     details.push(`hook targets missing: ${issues.missingHookTargets.join(", ")}`);
   }
+  if (issues.cwdUnsafeHookCommands.length > 0) {
+    details.push(`hook commands require plugin-root cwd: ${issues.cwdUnsafeHookCommands.join("; ")}`);
+  }
   if (issues.invalidRuntimeScripts.length > 0) {
     details.push(`runtime script issues: ${issues.invalidRuntimeScripts.join(", ")}`);
   }
@@ -19961,7 +20011,7 @@ function listClaudeSettingsCandidates(projectRoot) {
   });
 }
 function readClaudeDisableAllHooks(filePath) {
-  const parsed = readJsonFile2(dirname7(filePath), basename6(filePath));
+  const parsed = readJsonFile2(dirname7(filePath), basename7(filePath));
   return typeof parsed.disableAllHooks === "boolean" ? parsed.disableAllHooks : void 0;
 }
 function probeClaudeDisableAllHooks(projectRoot) {
@@ -20304,6 +20354,9 @@ function checkInstalledBundleIntegrity(checks, rootDir, layout) {
   if (issues.missingHookTargets.length > 0) {
     details.push(`hook commands reference missing bundle target${issues.missingHookTargets.length === 1 ? "" : "s"}: ${issues.missingHookTargets.join(", ")}`);
   }
+  if (issues.cwdUnsafeHookCommands.length > 0) {
+    details.push(`Codex hook command${issues.cwdUnsafeHookCommands.length === 1 ? " depends" : "s depend"} on plugin-root cwd: ${issues.cwdUnsafeHookCommands.join("; ")}`);
+  }
   if (issues.invalidRuntimeScripts.length > 0) {
     details.push(`runtime startup still depends on installer-owned validation: ${issues.invalidRuntimeScripts.join(", ")}`);
   }
@@ -20323,7 +20376,7 @@ function checkInstalledBundleIntegrity(checks, rootDir, layout) {
     code: "consumer-bundle-integrity-invalid",
     title: "Installed bundle integrity is broken",
     detail: details.join("; "),
-    fix: "Reinstall the plugin or rebuild the bundle so every manifest path, hook config, and hook target is valid inside the installed plugin.",
+    fix: "Reinstall the plugin or rebuild the bundle so every manifest path, hook config, and hook command resolves from the installed plugin root.",
     path: layout.manifestPath
   });
 }
@@ -20405,7 +20458,7 @@ function checkInstalledCodexHooksFeatureFlag(checks, rootDir, layout, options) {
       path: generalOnlyProbes[0].path
     });
   }
-  const legacyOnlyProbes = probes.filter((probe) => probe.alternateEnabled && !probe.recommendedEnabled);
+  const legacyOnlyProbes = probes.filter((probe) => !probe.pluginBundledEnabled && probe.alternateEnabled && !probe.recommendedEnabled);
   if (legacyOnlyProbes.length > 0) {
     addCheck2(checks, {
       level: "warning",
@@ -20796,7 +20849,7 @@ function isLikelyLocalRuntimePath3(value) {
 function isLikelyOpenCodeInstallPath(rootDir) {
   const parent = dirname7(rootDir);
   const grandparent = dirname7(parent);
-  return basename6(parent) === "plugins" && basename6(grandparent) === "opencode";
+  return basename7(parent) === "plugins" && basename7(grandparent) === "opencode";
 }
 function checkInstalledOpenCodeHostBridge(checks, rootDir) {
   if (!isLikelyOpenCodeInstallPath(rootDir)) {
@@ -20810,7 +20863,7 @@ function checkInstalledOpenCodeHostBridge(checks, rootDir) {
     });
     return;
   }
-  const pluginName = basename6(rootDir);
+  const pluginName = basename7(rootDir);
   const entryPath = `${rootDir}.ts`;
   const entryRelativePath = `${pluginName}.ts`;
   if (!existsSync24(entryPath)) {
@@ -20851,7 +20904,7 @@ function checkInstalledOpenCodeSkills(checks, rootDir) {
   if (!isLikelyOpenCodeInstallPath(rootDir)) {
     return;
   }
-  const pluginName = basename6(rootDir);
+  const pluginName = basename7(rootDir);
   const sourceSkillsDir = resolve20(rootDir, "skills");
   if (!existsSync24(sourceSkillsDir)) {
     addCheck2(checks, {
@@ -21079,7 +21132,7 @@ function printDoctorReport(report) {
 
 // src/cli/dev.ts
 import { watch } from "fs";
-import { relative as relative11, resolve as resolve21 } from "path";
+import { relative as relative12, resolve as resolve21 } from "path";
 var WATCH_PATTERNS = [
   /^pluxx\.config\.(ts|js|json)$/,
   /^skills\//,
@@ -21105,7 +21158,7 @@ async function runDev(args2) {
   let pendingFile = null;
   const watcher = watch(rootDir, { recursive: true }, (_event, filename) => {
     if (!filename) return;
-    const rel = relative11(rootDir, resolve21(rootDir, filename));
+    const rel = relative12(rootDir, resolve21(rootDir, filename));
     if (rel.startsWith("dist/") || rel.startsWith(".") || rel.includes("node_modules")) {
       return;
     }
@@ -21160,7 +21213,7 @@ async function runBuild(rootDir, targets) {
 }
 
 // src/cli/migrate.ts
-import { basename as basename7, dirname as dirname8, relative as relative12, resolve as resolve22 } from "path";
+import { basename as basename8, dirname as dirname8, relative as relative13, resolve as resolve22 } from "path";
 import { existsSync as existsSync25, readdirSync as readdirSync11, mkdirSync as mkdirSync5, cpSync as cpSync4, readFileSync as readFileSync15, writeFileSync as writeFileSync5 } from "fs";
 function detectPlatform(pluginDir) {
   const checks = [
@@ -21525,7 +21578,7 @@ function parseCursorRuleFile(pluginDir, filePath) {
   const content = readFileSync15(filePath, "utf-8");
   const { hasFrontmatter, frontmatterLines, body } = splitMarkdownFrontmatter5(content);
   if (!hasFrontmatter) return null;
-  const description = parseTopLevelStringFrontmatter(frontmatterLines, "description") ?? titleCaseFromDirName(basename7(filePath, ".mdc"));
+  const description = parseTopLevelStringFrontmatter(frontmatterLines, "description") ?? titleCaseFromDirName(basename8(filePath, ".mdc"));
   const globs = parseTopLevelStringOrStringArrayFrontmatter(frontmatterLines, "globs");
   const alwaysApply = parseTopLevelBooleanFrontmatter(frontmatterLines, "alwaysApply");
   return {
@@ -21533,7 +21586,7 @@ function parseCursorRuleFile(pluginDir, filePath) {
     ...globs !== void 0 ? { globs } : {},
     ...alwaysApply !== void 0 ? { alwaysApply } : {},
     ...body.trim() ? { content: body.trim() } : {},
-    path: `./${relative12(pluginDir, filePath).replace(/\\/g, "/")}`
+    path: `./${relative13(pluginDir, filePath).replace(/\\/g, "/")}`
   };
 }
 function collectFiles(dir, predicate) {
@@ -21578,7 +21631,7 @@ function findInstructionSources(pluginDir, detection) {
   const extraPaths = /* @__PURE__ */ new Set();
   const platformOverrides = {};
   if (detection.platform === "cursor") {
-    const nestedAgents = collectFiles(pluginDir, (entry) => entry === "AGENTS.md").map((path) => `./${relative12(pluginDir, path).replace(/\\/g, "/")}`).filter((path) => path !== primary);
+    const nestedAgents = collectFiles(pluginDir, (entry) => entry === "AGENTS.md").map((path) => `./${relative13(pluginDir, path).replace(/\\/g, "/")}`).filter((path) => path !== primary);
     if (nestedAgents.length > 0) {
       platformOverrides.cursor = {
         ...platformOverrides.cursor ?? {},
@@ -22241,7 +22294,7 @@ function hasTopLevelFrontmatterKey(frontmatterLines, key) {
 function normalizeMigratedOpenCodeAgentFile(agentPath) {
   const original = readFileSync15(agentPath, "utf-8");
   const parsed = splitMarkdownFrontmatter5(original);
-  const fileStem = toKebabCase2(basename7(agentPath, ".md")) || "agent";
+  const fileStem = toKebabCase2(basename8(agentPath, ".md")) || "agent";
   const fallbackDescription = buildFallbackAgentDescription(fileStem);
   if (!parsed.hasFrontmatter) {
     const rewritten2 = [
@@ -22297,7 +22350,7 @@ function normalizeMigratedOpenCodeAgents(destDir) {
   const normalized = [];
   for (const filePath of walkMarkdownFiles3(destDir)) {
     if (normalizeMigratedOpenCodeAgentFile(filePath)) {
-      normalized.push(relative12(destDir, filePath).replace(/\\/g, "/"));
+      normalized.push(relative13(destDir, filePath).replace(/\\/g, "/"));
     }
   }
   return normalized.sort();
@@ -24135,7 +24188,7 @@ ${c2}
 } }).prompt();
 
 // src/cli/index.ts
-import { basename as basename9, resolve as resolve29 } from "path";
+import { basename as basename10, resolve as resolve29 } from "path";
 import { mkdir as mkdir4, mkdtemp as mkdtemp3, rm as rm4 } from "fs/promises";
 import { tmpdir as tmpdir5 } from "os";
 import { spawn as spawn6, spawnSync as spawnSync4 } from "child_process";
@@ -25854,10 +25907,10 @@ import { resolve as resolve27 } from "path";
 import { existsSync as existsSync28, readFileSync as readFileSync19 } from "fs";
 import { mkdtemp as mkdtemp2, rm as rm3 } from "fs/promises";
 import { tmpdir as tmpdir4 } from "os";
-import { basename as basename8, resolve as resolve26 } from "path";
+import { basename as basename9, resolve as resolve26 } from "path";
 import { spawn as spawn4 } from "child_process";
 async function executeCodexExecCommand(command2, options) {
-  if (basename8(command2[0]) !== "codex" || command2[1] !== "exec") {
+  if (basename9(command2[0]) !== "codex" || command2[1] !== "exec") {
     throw new Error("Codex exec runner requires a command beginning with `codex exec`.");
   }
   const outputDir = await mkdtemp2(resolve26(tmpdir4(), options.outputDirPrefix ?? "pluxx-codex-exec-"));
@@ -26261,7 +26314,7 @@ function shellQuote2(value) {
 // src/cli/discover-installed-mcp.ts
 import { existsSync as existsSync30, readFileSync as readFileSync21, realpathSync as realpathSync3 } from "fs";
 import { homedir as homedir3 } from "os";
-import { isAbsolute as isAbsolute2, relative as relative13, resolve as resolve28 } from "path";
+import { isAbsolute as isAbsolute2, relative as relative14, resolve as resolve28 } from "path";
 var INSTALLED_MCP_HOSTS = ["claude-code", "cursor", "codex", "opencode"];
 function discoverInstalledMcpServers(options = {}) {
   const rootDir = options.rootDir ?? process.cwd();
@@ -26400,13 +26453,13 @@ function buildClaudeProjectSourceScope(projectPath, rootDir, homeDir) {
   return `projects/absolute/${normalizeScopePath(projectPath)}`;
 }
 function buildRelativeScopePath(baseDir, targetPath) {
-  const relativePath = relative13(baseDir, targetPath);
+  const relativePath = relative14(baseDir, targetPath);
   if (!relativePath.startsWith("..") && !isAbsolute2(relativePath)) {
     return normalizeScopePath(relativePath);
   }
   if (!existsSync30(baseDir) || !existsSync30(targetPath)) return void 0;
   try {
-    const realRelativePath = relative13(realpathSync3(baseDir), realpathSync3(targetPath));
+    const realRelativePath = relative14(realpathSync3(baseDir), realpathSync3(targetPath));
     if (realRelativePath.startsWith("..") || isAbsolute2(realRelativePath)) return void 0;
     return normalizeScopePath(realRelativePath);
   } catch {
@@ -26606,7 +26659,7 @@ function buildInstalledMcpSourceLabel(discovered, rootDir, homeDir) {
   return discovered.sourceScope ? `${base}:${discovered.sourceScope}` : base;
 }
 function buildRelativeSelectorLabel(prefix, baseDir, sourcePath) {
-  const relativePath = relative13(baseDir, sourcePath);
+  const relativePath = relative14(baseDir, sourcePath);
   if (relativePath === "") return `${prefix}:.`;
   if (relativePath.startsWith("..") || isAbsolute2(relativePath)) return void 0;
   return `${prefix}:${relativePath.replace(/\\/g, "/")}`;
@@ -27530,7 +27583,7 @@ async function runInit() {
   if (!runtime.isInteractive) {
     throw new Error("pluxx init requires an interactive terminal unless you use `pluxx init --from-mcp ... --yes`.");
   }
-  const dirName = positionalName ? toKebabCase3(positionalName) : basename9(process.cwd()).toLowerCase().replace(/[^a-z0-9-]/g, "-");
+  const dirName = positionalName ? toKebabCase3(positionalName) : basename10(process.cwd()).toLowerCase().replace(/[^a-z0-9-]/g, "-");
   console.log("");
   console.log("  pluxx init \u2014 Create a new plugin");
   console.log("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");

package/dist/cli/install.d.ts

@@ -15,6 +15,7 @@ interface BundleIntegrityIssues {
     hookConfigIssue?: string;
     missingManifestPaths: string[];
     missingHookTargets: string[];
+    cwdUnsafeHookCommands: string[];
     invalidRuntimeScripts: string[];
 }
 interface CommandResult {

package/dist/cli/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/cli/install.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC9E,OAAO,EAOL,KAAK,uBAAuB,EAC7B,MAAM,gBAAgB,CAAA;AAYvB,UAAU,aAAa;IACrB,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,UAAU,qBAAqB;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,qBAAqB,EAAE,MAAM,EAAE,CAAA;CAChC;AAED,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAqBD,KAAK,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,aAAa,CAAA;AAEvE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,KAAK,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;AACxC,KAAK,mBAAmB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAEpD,UAAU,sBAAsB;IAC9B,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;IACrC,KAAK,CAAC,EAAE,mBAAmB,CAAA;CAC5B;AAED,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAanE;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,YAAY,EACpB,SAAS,GAAE,cAAc,EAAmB,GAC3C,sBAAsB,EAAE,CAkC1B;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,YAAY,EACpB,SAAS,GAAE,cAAc,EAAmB,EAC5C,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAChC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CA6CpC;AAsDD,UAAU,sBAAsB;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACvD;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BpF;AAkND,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,CAE7E;AA0XD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CASrG;AAsID,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,qBAAqB,CAwFnH;AAmND,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,cAAc,EAAE,GAC3B,oBAAoB,EAAE,CAexB;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,cAAc,EAAE,EAC5B,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC,UAAU,CAAC,EAAE,aAAa,CAAA;IAC1B,kBAAkB,CAAC,EAAE,uBAAuB,EAAE,CAAA;CAC1C,GACL,OAAO,CAAC,IAAI,CAAC,CAwEf;AAED,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,cAAc,EAAE,EAC5B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,aAAa,CAAA;CAAO,GAC5D,OAAO,CAAC,IAAI,CAAC,CAqDf"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/cli/install.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC9E,OAAO,EAOL,KAAK,uBAAuB,EAC7B,MAAM,gBAAgB,CAAA;AAYvB,UAAU,aAAa;IACrB,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,UAAU,qBAAqB;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,kBAAkB,EAAE,MAAM,EAAE,CAAA;IAC5B,qBAAqB,EAAE,MAAM,EAAE,CAAA;IAC/B,qBAAqB,EAAE,MAAM,EAAE,CAAA;CAChC;AAED,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAqBD,KAAK,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,aAAa,CAAA;AAEvE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,KAAK,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;AACxC,KAAK,mBAAmB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAEpD,UAAU,sBAAsB;IAC9B,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;IACrC,KAAK,CAAC,EAAE,mBAAmB,CAAA;CAC5B;AAED,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAanE;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,YAAY,EACpB,SAAS,GAAE,cAAc,EAAmB,GAC3C,sBAAsB,EAAE,CAkC1B;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,YAAY,EACpB,SAAS,GAAE,cAAc,EAAmB,EAC5C,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAChC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CA6CpC;AAsDD,UAAU,sBAAsB;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACvD;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BpF;AAkND,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,CAE7E;AA0XD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CASrG;AAoLD,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,qBAAqB,CAkGnH;AAsND,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,cAAc,EAAE,GAC3B,oBAAoB,EAAE,CAexB;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,cAAc,EAAE,EAC5B,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC,UAAU,CAAC,EAAE,aAAa,CAAA;IAC1B,kBAAkB,CAAC,EAAE,uBAAuB,EAAE,CAAA;CAC1C,GACL,OAAO,CAAC,IAAI,CAAC,CAwEf;AAED,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,cAAc,EAAE,EAC5B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,aAAa,CAAA;CAAO,GAC5D,OAAO,CAAC,IAAI,CAAC,CAqDf"}

package/dist/hook-command-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook-command-env.d.ts","sourceRoot":"","sources":["../src/hook-command-env.ts"],"names":[],"mappings":"AAIA,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAkDjH"}
+{"version":3,"file":"hook-command-env.d.ts","sourceRoot":"","sources":["../src/hook-command-env.ts"],"names":[],"mappings":"AAIA,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAwDjH"}

package/dist/index.js

@@ -2203,7 +2203,7 @@ var require_jiti = __commonJS({
         }, pathe_M_eThtNZ_dirname = function(e3) {
           const t3 = pathe_M_eThtNZ_normalizeWindowsPath(e3).replace(/\/$/, "").split("/").slice(0, -1);
           return 1 === t3.length && ve.test(t3[0]) && (t3[0] += "/"), t3.join("/") || (isAbsolute(e3) ? "/" : ".");
-        }, basename2 = function(e3, t3) {
+        }, basename3 = function(e3, t3) {
           const i2 = pathe_M_eThtNZ_normalizeWindowsPath(e3).split("/");
           let s2 = "";
           for (let e4 = i2.length - 1; e4 >= 0; e4--) {
@@ -2911,7 +2911,7 @@ Default "index" lookups for the main are deprecated for ES modules.`, "Deprecati
           if (!e3.opts.fsCache || !t3.filename) return i2();
           const s2 = ` /* v${zt}-${utils_hash(t3.source, 16)} */
 `;
-          let r2 = `${basename2(pathe_M_eThtNZ_dirname(t3.filename))}-${(function(e4) {
+          let r2 = `${basename3(pathe_M_eThtNZ_dirname(t3.filename))}-${(function(e4) {
             const t4 = e4.split(lt).pop();
             if (!t4) return;
             const i3 = t4.lastIndexOf(".");
@@ -2957,7 +2957,7 @@ Default "index" lookups for the main are deprecated for ES modules.`, "Deprecati
           return i2.startsWith("#!") && (i2 = "// " + i2), i2;
         }
         function eval_evalModule(e3, t3, i2 = {}) {
-          const s2 = i2.id || (i2.filename ? basename2(i2.filename) : `_jitiEval.${i2.ext || (i2.async ? "mjs" : "js")}`), r2 = i2.filename || jitiResolve(e3, s2, { async: i2.async }), n2 = i2.ext || extname(r2), a2 = i2.cache || e3.parentCache || {}, o2 = /\.[cm]?tsx?$/.test(n2), h2 = ".mjs" === n2 || ".js" === n2 && "module" === (function(e4) {
+          const s2 = i2.id || (i2.filename ? basename3(i2.filename) : `_jitiEval.${i2.ext || (i2.async ? "mjs" : "js")}`), r2 = i2.filename || jitiResolve(e3, s2, { async: i2.async }), n2 = i2.ext || extname(r2), a2 = i2.cache || e3.parentCache || {}, o2 = /\.[cm]?tsx?$/.test(n2), h2 = ".mjs" === n2 || ".js" === n2 && "module" === (function(e4) {
             for (; e4 && "." !== e4 && "/" !== e4; ) {
               e4 = pathe_M_eThtNZ_join(e4, "..");
               try {
@@ -7929,18 +7929,18 @@ function getRuntimeReadinessCapability(platform, pluginRootVar = "PLUGIN_ROOT")
           {
             gate: "session-start",
             event: "SessionStart",
-            command: "node ./.codex/pluxx-readiness.mjs session-start"
+            command: `node "\${${pluginRootVar}}/.codex/pluxx-readiness.mjs" session-start`
           },
           {
             gate: "mcp-gate",
             event: "PreToolUse",
             matcher: "MCP",
-            command: "node ./.codex/pluxx-readiness.mjs mcp-gate"
+            command: `node "\${${pluginRootVar}}/.codex/pluxx-readiness.mjs" mcp-gate`
           },
           {
             gate: "prompt-gate",
             event: "UserPromptSubmit",
-            command: "node ./.codex/pluxx-readiness.mjs prompt-gate"
+            command: `node "\${${pluginRootVar}}/.codex/pluxx-readiness.mjs" prompt-gate`
           }
         ],
         notes: CODEX_EXTERNAL_NOTE
@@ -10621,7 +10621,7 @@ import { resolve as resolve5 } from "path";
 import { spawn, spawnSync as spawnSync2 } from "child_process";
 import { accessSync, constants, existsSync as existsSync4, lstatSync, readFileSync as readFileSync4, readdirSync as readdirSync2, realpathSync } from "fs";
 import { homedir } from "os";
-import { basename, dirname as dirname2, resolve as resolve4 } from "path";
+import { basename as basename2, dirname as dirname2, resolve as resolve4 } from "path";
 
 // node_modules/jiti/lib/jiti.mjs
 var import_jiti = __toESM(require_jiti(), 1);
@@ -10634,7 +10634,7 @@ var CONFIG_FILES = [
 ];
 
 // src/cli/install.ts
-import { resolve as resolve3, dirname } from "path";
+import { resolve as resolve3, dirname, basename, relative } from "path";
 import { existsSync as existsSync3, symlinkSync, mkdirSync as mkdirSync2, rmSync as rmSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2, cpSync, readdirSync } from "fs";
 
 // src/mcp-stdio-paths.ts
@@ -10779,7 +10779,7 @@ function resolveBundleReference(rootDir, value) {
   if (isRelativeBundlePath(value)) {
     return resolve3(rootDir, value);
   }
-  const pluginRootMatch = value.match(/^\$\{(?:CLAUDE_PLUGIN_ROOT|CURSOR_PLUGIN_ROOT|PLUGIN_ROOT)\}[\\/](.+)$/);
+  const pluginRootMatch = value.match(/^\$\{(?:CLAUDE_PLUGIN_ROOT|CURSOR_PLUGIN_ROOT|CODEX_PLUGIN_ROOT|OPENCODE_PLUGIN_ROOT|PLUGIN_ROOT|PLUXX_PLUGIN_ROOT)\}[\\/](.+)$/);
   if (pluginRootMatch) {
     return resolve3(rootDir, pluginRootMatch[1]);
   }
@@ -10822,9 +10822,43 @@ function collectHookCommandStrings(value, commands) {
   }
 }
 function extractBundleCommandTargets(command) {
-  const matches = command.match(/\$\{(?:CLAUDE_PLUGIN_ROOT|CURSOR_PLUGIN_ROOT|PLUGIN_ROOT)\}[\\/][^\s"'`;$|&<>]+|\.\.?[\\/][^\s"'`;$|&<>]+/g);
+  const matches = command.match(/\$\{(?:CLAUDE_PLUGIN_ROOT|CURSOR_PLUGIN_ROOT|CODEX_PLUGIN_ROOT|OPENCODE_PLUGIN_ROOT|PLUGIN_ROOT|PLUXX_PLUGIN_ROOT)\}[\\/][^\s"'`;$|&<>]+|\.\.?[\\/][^\s"'`;$|&<>]+/g);
   return matches ?? [];
 }
+function extractRelativeBundleCommandTargets(command) {
+  return extractBundleCommandTargets(command).filter(isRelativeBundlePath);
+}
+function commandChangesToKnownPluginRoot(command) {
+  return /\bcd\s+["']?\$\{?(?:CLAUDE_PLUGIN_ROOT|CURSOR_PLUGIN_ROOT|CODEX_PLUGIN_ROOT|OPENCODE_PLUGIN_ROOT|PLUGIN_ROOT|PLUXX_PLUGIN_ROOT)\}?/.test(command);
+}
+function formatBundleRelativePath(rootDir, filePath) {
+  const relativePath = relative(rootDir, filePath);
+  return relativePath && !relativePath.startsWith("..") ? relativePath : filePath;
+}
+function findHookWrapperPaths(rootDir, command) {
+  return extractBundleCommandTargets(command).map((target) => resolveBundleReference(rootDir, target)).filter((target) => {
+    if (!target) return false;
+    return existsSync3(target) && basename(target).startsWith("pluxx-hook-command-") && target.endsWith(".sh");
+  });
+}
+function findCodexCwdUnsafeHookCommands(rootDir, commands) {
+  const issues = /* @__PURE__ */ new Set();
+  for (const command of commands) {
+    const relativeTargets = extractRelativeBundleCommandTargets(command);
+    if (relativeTargets.length > 0 && !commandChangesToKnownPluginRoot(command)) {
+      issues.add(`${command} uses cwd-relative bundle target(s): ${relativeTargets.join(", ")}`);
+    }
+    for (const wrapperPath of findHookWrapperPaths(rootDir, command)) {
+      const wrapper = readFileSync3(wrapperPath, "utf-8");
+      const hookCommand = wrapper.match(/^PLUXX_HOOK_COMMAND=(.*)$/m)?.[1] ?? "";
+      const wrapperRelativeTargets = extractRelativeBundleCommandTargets(hookCommand);
+      if (wrapperRelativeTargets.length > 0 && !commandChangesToKnownPluginRoot(wrapper)) {
+        issues.add(`${formatBundleRelativePath(rootDir, wrapperPath)} evaluates cwd-relative bundle target(s): ${wrapperRelativeTargets.join(", ")}`);
+      }
+    }
+  }
+  return [...issues].sort();
+}
 function resolveInstalledHooksReference(rootDir, platform, manifest) {
   const manifestReference = typeof manifest.hooks === "string" ? manifest.hooks : void 0;
   if (manifestReference) {
@@ -10862,6 +10896,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
     return {
       missingManifestPaths: [],
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: []
     };
   }
@@ -10871,6 +10906,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
       manifestIssue: `missing plugin manifest at ${manifestPath}`,
       missingManifestPaths: [],
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: []
     };
   }
@@ -10882,6 +10918,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
       manifestIssue: `plugin manifest at ${manifestPath} is not parseable: ${error instanceof Error ? error.message : String(error)}`,
       missingManifestPaths: [],
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: []
     };
   }
@@ -10896,6 +10933,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
       ...manifestIssue ? { manifestIssue } : {},
       missingManifestPaths,
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: findInstalledRuntimeScriptIssues(rootDir, manifest)
     };
   }
@@ -10904,6 +10942,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
       ...manifestIssue ? { manifestIssue } : {},
       missingManifestPaths,
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: findInstalledRuntimeScriptIssues(rootDir, manifest)
     };
   }
@@ -10917,10 +10956,12 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
         return resolved !== void 0 && !existsSync3(resolved);
       })
     )].sort();
+    const cwdUnsafeHookCommands = platform === "codex" ? findCodexCwdUnsafeHookCommands(rootDir, commands) : [];
     return {
       ...manifestIssue ? { manifestIssue } : {},
       missingManifestPaths,
       missingHookTargets,
+      cwdUnsafeHookCommands,
       invalidRuntimeScripts: findInstalledRuntimeScriptIssues(rootDir, manifest)
     };
   } catch (error) {
@@ -10929,6 +10970,7 @@ function findInstalledBundleIntegrityIssues(rootDir, platform) {
       hookConfigIssue: `hooks config at ${hooksReference} is not parseable: ${error instanceof Error ? error.message : String(error)}`,
       missingManifestPaths,
       missingHookTargets: [],
+      cwdUnsafeHookCommands: [],
       invalidRuntimeScripts: findInstalledRuntimeScriptIssues(rootDir, manifest)
     };
   }
@@ -11638,7 +11680,7 @@ function listClaudeSettingsCandidates(projectRoot) {
   });
 }
 function readClaudeDisableAllHooks(filePath) {
-  const parsed = readJsonFile(dirname2(filePath), basename(filePath));
+  const parsed = readJsonFile(dirname2(filePath), basename2(filePath));
   return typeof parsed.disableAllHooks === "boolean" ? parsed.disableAllHooks : void 0;
 }
 function probeClaudeDisableAllHooks(projectRoot) {
@@ -11981,6 +12023,9 @@ function checkInstalledBundleIntegrity(checks, rootDir, layout) {
   if (issues.missingHookTargets.length > 0) {
     details.push(`hook commands reference missing bundle target${issues.missingHookTargets.length === 1 ? "" : "s"}: ${issues.missingHookTargets.join(", ")}`);
   }
+  if (issues.cwdUnsafeHookCommands.length > 0) {
+    details.push(`Codex hook command${issues.cwdUnsafeHookCommands.length === 1 ? " depends" : "s depend"} on plugin-root cwd: ${issues.cwdUnsafeHookCommands.join("; ")}`);
+  }
   if (issues.invalidRuntimeScripts.length > 0) {
     details.push(`runtime startup still depends on installer-owned validation: ${issues.invalidRuntimeScripts.join(", ")}`);
   }
@@ -12000,7 +12045,7 @@ function checkInstalledBundleIntegrity(checks, rootDir, layout) {
     code: "consumer-bundle-integrity-invalid",
     title: "Installed bundle integrity is broken",
     detail: details.join("; "),
-    fix: "Reinstall the plugin or rebuild the bundle so every manifest path, hook config, and hook target is valid inside the installed plugin.",
+    fix: "Reinstall the plugin or rebuild the bundle so every manifest path, hook config, and hook command resolves from the installed plugin root.",
     path: layout.manifestPath
   });
 }
@@ -12082,7 +12127,7 @@ function checkInstalledCodexHooksFeatureFlag(checks, rootDir, layout, options) {
       path: generalOnlyProbes[0].path
     });
   }
-  const legacyOnlyProbes = probes.filter((probe) => probe.alternateEnabled && !probe.recommendedEnabled);
+  const legacyOnlyProbes = probes.filter((probe) => !probe.pluginBundledEnabled && probe.alternateEnabled && !probe.recommendedEnabled);
   if (legacyOnlyProbes.length > 0) {
     addCheck(checks, {
       level: "warning",
@@ -12473,7 +12518,7 @@ function isLikelyLocalRuntimePath(value) {
 function isLikelyOpenCodeInstallPath(rootDir) {
   const parent = dirname2(rootDir);
   const grandparent = dirname2(parent);
-  return basename(parent) === "plugins" && basename(grandparent) === "opencode";
+  return basename2(parent) === "plugins" && basename2(grandparent) === "opencode";
 }
 function checkInstalledOpenCodeHostBridge(checks, rootDir) {
   if (!isLikelyOpenCodeInstallPath(rootDir)) {
@@ -12487,7 +12532,7 @@ function checkInstalledOpenCodeHostBridge(checks, rootDir) {
     });
     return;
   }
-  const pluginName = basename(rootDir);
+  const pluginName = basename2(rootDir);
   const entryPath = `${rootDir}.ts`;
   const entryRelativePath = `${pluginName}.ts`;
   if (!existsSync4(entryPath)) {
@@ -12528,7 +12573,7 @@ function checkInstalledOpenCodeSkills(checks, rootDir) {
   if (!isLikelyOpenCodeInstallPath(rootDir)) {
     return;
   }
-  const pluginName = basename(rootDir);
+  const pluginName = basename2(rootDir);
   const sourceSkillsDir = resolve4(rootDir, "skills");
   if (!existsSync4(sourceSkillsDir)) {
     addCheck(checks, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchid-labs/pluxx",
-  "version": "0.1.20",
+  "version": "0.1.21",
   "description": "Build AI agent plugins once. Prime-time on Claude Code, Cursor, Codex, and OpenCode, with beta generators for additional hosts.",
   "type": "module",
   "main": "dist/index.js",