@shenlee/devcrew 0.1.4 → 0.1.5

package/README.md

@@ -35,7 +35,7 @@ Restart Codex, open the plugin directory, choose the DevCrew marketplace, and in
 The plugin starts the DevCrew MCP server with:
 
 ```bash
-npm exec --silent --yes --package=@shenlee/devcrew@0.1.4 -- node -e "<DevCrew CLI wrapper>" -- serve --stdio
+npm exec --silent --yes --package=@shenlee/devcrew@0.1.5 -- node -e "<DevCrew CLI wrapper>" -- serve --stdio
 ```
 
 The plugin locks the MCP server to the published npm package version, so users do not need to clone the source or build TypeScript at install time. You only need Node.js and network access the first time Codex starts the MCP server.

package/README.zh-CN.md

@@ -35,7 +35,7 @@ codex plugin marketplace add lishen802/devcrew
 插件会用下面的命令启动 DevCrew MCP 服务：
 
 ```bash
-npm exec --silent --yes --package=@shenlee/devcrew@0.1.4 -- node -e "<DevCrew CLI wrapper>" -- serve --stdio
+npm exec --silent --yes --package=@shenlee/devcrew@0.1.5 -- node -e "<DevCrew CLI wrapper>" -- serve --stdio
 ```
 
 插件会锁定到已发布的 npm 包版本，因此用户不需要克隆源码，也不需要在安装时编译 TypeScript；只需要本机有 Node.js，并且 Codex 第一次启动 MCP 服务时可以访问网络。

package/dist/packages/adapters/src/index.js

@@ -1,3 +1,5 @@
+import { accessSync, constants, realpathSync } from "node:fs";
+import { delimiter, join, sep } from "node:path";
 import { DEVCREW_NPM_PACKAGE, ROLE_SECTIONS } from "../../core/src/index.js";
 export function resolveBackendName(input) {
     if (input.configuredBackend && input.configuredBackend !== "host-preferred") {
@@ -349,10 +351,48 @@ function claudeOptionsForRole(input) {
     const allowedTools = input.role === "implementer" ? ["Read", "Grep", "Glob", "Edit", "Write"] : ["Read", "Grep", "Glob"];
     return buildClaudeOptions(input.cwd, "dontAsk", allowedTools);
 }
+function resolveHostCodexExecutable() {
+    const explicitPath = process.env.DEVCREW_CODEX_PATH?.trim();
+    if (explicitPath) {
+        return explicitPath;
+    }
+    const pathValue = process.env.PATH ?? Object.entries(process.env)
+        .find(([key]) => key.toLowerCase() === "path")?.[1];
+    if (!pathValue) {
+        return undefined;
+    }
+    const executableNames = process.platform === "win32"
+        ? ["codex.exe", "codex.cmd", "codex.bat", "codex"]
+        : ["codex"];
+    for (const entry of pathValue.split(delimiter)) {
+        const directory = entry.trim().replace(/^"|"$/g, "");
+        if (!directory) {
+            continue;
+        }
+        for (const executableName of executableNames) {
+            const candidate = join(directory, executableName);
+            try {
+                accessSync(candidate, process.platform === "win32" ? constants.F_OK : constants.X_OK);
+                const normalizedCandidate = candidate.split(sep).join("/");
+                const normalizedRealPath = realpathSync(candidate).split(sep).join("/");
+                if (normalizedCandidate.includes("/node_modules/.bin/")
+                    || normalizedRealPath.includes("/node_modules/@openai/codex/")) {
+                    continue;
+                }
+                return candidate;
+            }
+            catch {
+                // Keep searching PATH; the SDK's packaged runtime remains the fallback.
+            }
+        }
+    }
+    return undefined;
+}
 async function runWithCodex(input, prompt, loadModule) {
     const mod = await loadModule(HOST_SDK_PACKAGES.codex);
     const CodexClass = mod.Codex;
-    const codex = new CodexClass();
+    const codexPathOverride = resolveHostCodexExecutable();
+    const codex = new CodexClass(codexPathOverride ? { codexPathOverride } : undefined);
     const thread = codex.startThread(codexOptionsForRole(input));
     const turn = await thread.run(prompt);
     return extractCodexText(turn);

package/dist/packages/core/src/version.js

@@ -1,2 +1,2 @@
-export const DEVCREW_VERSION = "0.1.4";
+export const DEVCREW_VERSION = "0.1.5";
 export const DEVCREW_NPM_PACKAGE = "@shenlee/devcrew";

package/docs/claude-code.md

@@ -41,7 +41,7 @@ For local plugin testing:
 claude --plugin-dir plugins/devcrew-claude
 ```
 
-Then ask Claude Code to use DevCrew for a feature or product workflow. The generated `.mcp.json` starts the version-locked npm package with an `npm exec --package=@shenlee/devcrew@0.1.4` wrapper.
+Then ask Claude Code to use DevCrew for a feature or product workflow. The generated `.mcp.json` starts the version-locked npm package with an `npm exec --package=@shenlee/devcrew@0.1.5` wrapper.
 
 The default apply policy is `interactive-host`: Claude Code performs implementation and testing with its native controls. Explicit `headless-restricted` and `headless-unattended` policies are independent DevCrew SDK policies and do not inherit the current Claude Code approval session.
 

package/docs/codex.md

@@ -13,7 +13,7 @@ Restart Codex, open the plugin directory, select the DevCrew marketplace, and in
 The plugin launches the MCP server with:
 
 ```bash
-npm exec --silent --yes --package=@shenlee/devcrew@0.1.4 -- node -e "<DevCrew CLI wrapper>" -- serve --stdio
+npm exec --silent --yes --package=@shenlee/devcrew@0.1.5 -- node -e "<DevCrew CLI wrapper>" -- serve --stdio
 ```
 
 Use this path when you want to use DevCrew without cloning the repository first. The version is locked to the published npm package that matches the plugin manifest.
@@ -83,7 +83,7 @@ npm install -g @shenlee/devcrew --include=optional
 
 ## Marketplace smoke test
 
-After publishing `@shenlee/devcrew@0.1.4`, run the real marketplace smoke test. Do not treat this as a pre-publication check because the plugin is locked to that npm version:
+After publishing `@shenlee/devcrew@0.1.5`, run the real marketplace smoke test. Do not treat this as a pre-publication check because the plugin is locked to that npm version:
 
 ```bash
 npm run smoke:codex-plugin

package/docs/quickstart.md

@@ -37,7 +37,7 @@ devcrew serve --stdio
 ```
 
 Normally the generated plugin starts this command for the host agent.
-Codex and Claude plugin bundles use a version-locked `npm exec --package=@shenlee/devcrew@0.1.4` wrapper so the MCP service is locked to the published package version.
+Codex and Claude plugin bundles use a version-locked `npm exec --package=@shenlee/devcrew@0.1.5` wrapper so the MCP service is locked to the published package version.
 
 ## 4. Run A Workflow
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shenlee/devcrew",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Multi-host agent workflow service for Codex and Claude Code.",
   "type": "module",
   "license": "Apache-2.0",
@@ -55,6 +55,6 @@
   },
   "optionalDependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.163",
-    "@openai/codex-sdk": "0.137.0"
+    "@openai/codex-sdk": "0.144.5"
   }
 }

package/packages/adapters/src/index.ts

@@ -1,3 +1,6 @@
+import { accessSync, constants, realpathSync } from "node:fs";
+import { delimiter, join, sep } from "node:path";
+
 import { DEVCREW_NPM_PACKAGE, ROLE_SECTIONS } from "../../core/src/index.js";
 import type {
   ArtifactName,
@@ -338,7 +341,7 @@ function titleForPhase(phase: Phase): string {
 // --- Host SDK contracts -----------------------------------------------------
 // These types pin the published surface of the optional host SDKs so the
 // adapter logic is type-checked even though the packages are not installed.
-// Verified against @openai/codex-sdk 0.136.0 (sdk/typescript/src/threadOptions.ts
+// Verified against @openai/codex-sdk 0.144.5 (sdk/typescript/src/threadOptions.ts
 // and thread.ts) and @anthropic-ai/claude-agent-sdk (Agent SDK TypeScript
 // reference). Update these when the upstream contracts change.
 
@@ -368,7 +371,11 @@ interface CodexClient {
   startThread: (options?: CodexThreadOptions) => CodexThread;
 }
 
-type CodexConstructor = new () => CodexClient;
+interface CodexClientOptions {
+  codexPathOverride?: string;
+}
+
+type CodexConstructor = new (options?: CodexClientOptions) => CodexClient;
 
 export type ClaudePermissionMode = "default" | "acceptEdits" | "bypassPermissions" | "dontAsk" | "plan";
 
@@ -535,10 +542,52 @@ function claudeOptionsForRole(input: RoleRunInput): ClaudeQueryOptions {
   return buildClaudeOptions(input.cwd, "dontAsk", allowedTools);
 }
 
+function resolveHostCodexExecutable(): string | undefined {
+  const explicitPath = process.env.DEVCREW_CODEX_PATH?.trim();
+  if (explicitPath) {
+    return explicitPath;
+  }
+
+  const pathValue = process.env.PATH ?? Object.entries(process.env)
+    .find(([key]) => key.toLowerCase() === "path")?.[1];
+  if (!pathValue) {
+    return undefined;
+  }
+
+  const executableNames = process.platform === "win32"
+    ? ["codex.exe", "codex.cmd", "codex.bat", "codex"]
+    : ["codex"];
+  for (const entry of pathValue.split(delimiter)) {
+    const directory = entry.trim().replace(/^"|"$/g, "");
+    if (!directory) {
+      continue;
+    }
+    for (const executableName of executableNames) {
+      const candidate = join(directory, executableName);
+      try {
+        accessSync(candidate, process.platform === "win32" ? constants.F_OK : constants.X_OK);
+        const normalizedCandidate = candidate.split(sep).join("/");
+        const normalizedRealPath = realpathSync(candidate).split(sep).join("/");
+        if (
+          normalizedCandidate.includes("/node_modules/.bin/")
+          || normalizedRealPath.includes("/node_modules/@openai/codex/")
+        ) {
+          continue;
+        }
+        return candidate;
+      } catch {
+        // Keep searching PATH; the SDK's packaged runtime remains the fallback.
+      }
+    }
+  }
+  return undefined;
+}
+
 async function runWithCodex(input: RoleRunInput, prompt: string, loadModule: ModuleLoader): Promise<string> {
   const mod = await loadModule(HOST_SDK_PACKAGES.codex);
   const CodexClass = mod.Codex as CodexConstructor;
-  const codex = new CodexClass();
+  const codexPathOverride = resolveHostCodexExecutable();
+  const codex = new CodexClass(codexPathOverride ? { codexPathOverride } : undefined);
   const thread = codex.startThread(codexOptionsForRole(input));
   const turn = await thread.run(prompt);
   return extractCodexText(turn);

package/packages/core/src/version.ts

@@ -1,2 +1,2 @@
-export const DEVCREW_VERSION = "0.1.4";
+export const DEVCREW_VERSION = "0.1.5";
 export const DEVCREW_NPM_PACKAGE = "@shenlee/devcrew";

package/plugins/devcrew-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "devcrew",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "DevCrew gated multi-role workflow service for Codex.",
   "author": {
     "name": "DevCrew Contributors",

package/plugins/devcrew-codex/.mcp.json

@@ -6,7 +6,7 @@
         "exec",
         "--silent",
         "--yes",
-        "--package=@shenlee/devcrew@0.1.4",
+        "--package=@shenlee/devcrew@0.1.5",
         "--",
         "node",
         "-e",

package/scripts/smoke-codex-plugin.mjs

@@ -298,7 +298,7 @@ async function main() {
       await client.request("initialize", {
         protocolVersion: "2025-03-26",
         capabilities: {},
-        clientInfo: { name: "devcrew-codex-plugin-smoke", version: "0.1.4" },
+        clientInfo: { name: "devcrew-codex-plugin-smoke", version: "0.1.5" },
       });
       client.notify("notifications/initialized", {});
       const tools = await client.request("tools/list", {});