@orchid-labs/pluxx 0.1.8 → 0.1.10

package/dist/cli/index.js

@@ -5195,11 +5195,27 @@ async function generateClaudeFamilyOutputs(args2) {
 function shellSingleQuote(value) {
   return `'${value.replace(/'/g, `'"'"'`)}'`;
 }
+function rewriteClaudePluginRootReference(value) {
+  const normalized = value.replace(/\\/g, "/");
+  if (normalized.startsWith("${CLAUDE_PLUGIN_ROOT}/")) return normalized;
+  if (normalized.startsWith("${PLUGIN_ROOT}/")) {
+    return normalized.replace("${PLUGIN_ROOT}", "${CLAUDE_PLUGIN_ROOT}");
+  }
+  if (normalized.startsWith("./")) {
+    return `\${CLAUDE_PLUGIN_ROOT}/${normalized.slice(2)}`;
+  }
+  if (normalized.startsWith("../")) {
+    return `\${CLAUDE_PLUGIN_ROOT}/${normalized}`;
+  }
+  return value;
+}
 function buildClaudeHookCommandWrapperScript(command2) {
   const serializedCommand = shellSingleQuote(command2);
   const exportLoader = [
     'import { readFileSync } from "node:fs"',
     "",
+    "const shellSingleQuote = (input) => `'${String(input ?? \"\").replace(/'/g, `'\"'\"'`)}'`",
+    "",
     "const filepath = process.argv[1]",
     "if (!filepath) process.exit(0)",
     'const payload = JSON.parse(readFileSync(filepath, "utf8"))',
@@ -5209,7 +5225,7 @@ function buildClaudeHookCommandWrapperScript(command2) {
     "",
     "for (const [key, value] of Object.entries(env)) {",
     "  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) continue",
-    '  console.log(`export ${key}=${JSON.stringify(String(value ?? ""))}`)',
+    "  process.stdout.write(`export ${key}=${shellSingleQuote(value)}\\0`)",
     "}"
   ].join("\n");
   return [
@@ -5220,7 +5236,7 @@ function buildClaudeHookCommandWrapperScript(command2) {
     'PLUXX_USER_CONFIG_PATH="$PLUXX_PLUGIN_ROOT/.pluxx-user.json"',
     "",
     'if [ -f "$PLUXX_USER_CONFIG_PATH" ]; then',
-    "  while IFS= read -r pluxx_export; do",
+    "  while IFS= read -r -d '' pluxx_export; do",
     '    if [ -n "$pluxx_export" ]; then',
     '      eval "$pluxx_export"',
     '      if [ -n "${CLAUDE_ENV_FILE:-}" ]; then',
@@ -5279,9 +5295,11 @@ async function writeMcpConfig(config, platform, writeJson) {
   const usesPlatformManagedAuth = platform === "claude-code" && config.platforms?.["claude-code"]?.mcpAuth === "platform";
   for (const [name, server] of Object.entries(config.mcp)) {
     if (server.transport === "stdio" && server.command) {
+      const command2 = platform === "claude-code" ? rewriteClaudePluginRootReference(server.command) : server.command;
+      const args2 = platform === "claude-code" ? (server.args ?? []).map(rewriteClaudePluginRootReference) : server.args ?? [];
       mcpServers[name] = {
-        command: server.command,
-        args: server.args ?? [],
+        command: command2,
+        args: args2,
         env: server.env ?? {}
       };
     } else {
@@ -8114,6 +8132,12 @@ var MAX_SKILL_NAME = AGENT_SKILLS_RULES.name.maxLength;
 var MAX_CODEX_DEFAULT_PROMPTS = CODEX_RULES.interface.maxDefaultPrompts;
 var MAX_CODEX_PROMPT_LENGTH = CODEX_RULES.interface.maxDefaultPromptLength;
 var HEX_COLOR_REGEX = CODEX_RULES.interface.brandColorPattern;
+var DIRECT_INSTALL_VALIDATION_HOOKS = /* @__PURE__ */ new Set([
+  'bash "${PLUGIN_ROOT}/scripts/check-env.sh"',
+  'bash "${CLAUDE_PLUGIN_ROOT}/scripts/check-env.sh"',
+  'bash "${CURSOR_PLUGIN_ROOT}/scripts/check-env.sh"',
+  'bash "./scripts/check-env.sh"'
+]);
 function pushIssue(issues, issue) {
   issues.push(issue);
 }
@@ -8587,6 +8611,42 @@ function findLocalStdioRuntimePaths(rootDir, server) {
 function isLikelyLocalRuntimePath(value) {
   return value.startsWith("./") || value.startsWith("../") || value.startsWith(".\\") || value.startsWith("..\\");
 }
+function referencesInstallerOwnedCheckEnv(command2) {
+  return command2.includes("check-env.sh");
+}
+function lintInstallerOwnedRuntimeScripts(config, issues) {
+  if (config.mcp) {
+    for (const [serverName, server] of Object.entries(config.mcp)) {
+      if (server.transport !== "stdio") continue;
+      const runtimeTokens = [server.command, ...server.args ?? []];
+      if (!runtimeTokens.some((token) => referencesInstallerOwnedCheckEnv(token))) continue;
+      pushIssue(issues, {
+        level: "warning",
+        code: "installer-owned-check-env-runtime",
+        message: `MCP server "${serverName}" references scripts/check-env.sh in its runtime command or args. Pluxx install rewrites that file into a no-op after userConfig materialization, so runtime startup must not depend on it. Use separate runtime scripts such as load-env.sh, bootstrap-runtime.sh, and start-mcp.sh instead.`,
+        file: "pluxx.config.ts",
+        platform: "Runtime"
+      });
+    }
+  }
+  if (!config.hooks) return;
+  for (const [eventName, hookEntries] of Object.entries(config.hooks)) {
+    if (!Array.isArray(hookEntries)) continue;
+    for (const entry of hookEntries) {
+      if (!entry || typeof entry !== "object") continue;
+      const command2 = entry.command;
+      if (typeof command2 !== "string" || !referencesInstallerOwnedCheckEnv(command2)) continue;
+      if (DIRECT_INSTALL_VALIDATION_HOOKS.has(command2.trim())) continue;
+      pushIssue(issues, {
+        level: "warning",
+        code: "installer-owned-check-env-hook",
+        message: `Hook "${eventName}" references scripts/check-env.sh as part of a broader runtime command. Treat that script as installer-owned and install-time only, because local installs may rewrite it into a no-op after required config is materialized.`,
+        file: "pluxx.config.ts",
+        platform: "Runtime"
+      });
+    }
+  }
+}
 function lintCodexHookCompatibility(config, issues) {
   if (!isCodexTargetEnabled(config) || !config.hooks) return;
   for (const hookEvent of Object.keys(config.hooks)) {
@@ -9276,6 +9336,7 @@ async function lintProject(dir = process.cwd(), options = {}) {
   lintOpenCodeAgentFrontmatter(dir, { ...lintConfig, agents: lintConfig.agents ?? "./agents/" }, issues);
   lintMcpUrls(lintConfig, issues);
   lintMcpRuntimeState(dir, lintConfig, issues);
+  lintInstallerOwnedRuntimeScripts(lintConfig, issues);
   lintBrandMetadata(lintConfig, issues);
   lintCodexOverrides(lintConfig, issues);
   lintCodexHookCompatibility(lintConfig, issues);

package/dist/cli/lint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lint.d.ts","sourceRoot":"","sources":["../../src/cli/lint.ts"],"names":[],"mappings":"AAGA,OAAO,EAA6F,KAAK,cAAc,EAAE,MAAM,WAAW,CAAA;AAI1I,OAAO,EAAuE,KAAK,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AAsC3I,KAAK,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;AAEpC,UAAU,SAAS;IACjB,KAAK,EAAE,SAAS,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAaD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,gBAAgB,CAAC,EAAE,2BAA2B,CAAA;CAC/C;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAA;CAC3B;AAu1CD,wBAAsB,WAAW,CAC/B,GAAG,GAAE,MAAsB,EAC3B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,UAAU,CAAC,CA6GrB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,GAAE,MAAsB,GAAG,IAAI,CA0BrF;AAED,wBAAsB,OAAO,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAI1E"}
+{"version":3,"file":"lint.d.ts","sourceRoot":"","sources":["../../src/cli/lint.ts"],"names":[],"mappings":"AAGA,OAAO,EAA6F,KAAK,cAAc,EAAE,MAAM,WAAW,CAAA;AAI1I,OAAO,EAAuE,KAAK,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AAsC3I,KAAK,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;AAEpC,UAAU,SAAS;IACjB,KAAK,EAAE,SAAS,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAaD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,SAAS,EAAE,CAAA;IACnB,gBAAgB,CAAC,EAAE,2BAA2B,CAAA;CAC/C;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAA;CAC3B;AAy4CD,wBAAsB,WAAW,CAC/B,GAAG,GAAE,MAAsB,EAC3B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,UAAU,CAAC,CA8GrB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,GAAE,MAAsB,GAAG,IAAI,CA0BrF;AAED,wBAAsB,OAAO,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAI1E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchid-labs/pluxx",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Build AI agent plugins once. Prime-time on Claude Code, Cursor, Codex, and OpenCode, with beta generators for additional hosts.",
   "type": "module",
   "main": "dist/index.js",