@swarmify/agents-cli 1.13.2 → 1.13.4

package/dist/lib/session/active.js

@@ -0,0 +1,379 @@
+/**
+ * Active-session detection across every context an agent can run in:
+ *
+ *   - `terminal` — agents launched from VS Code / Cursor / Codium via the
+ *     swarmify extension. Published to `~/.agents/swarmify/live-terminals.json`
+ *     with PID + session UUID per entry.
+ *   - `teams`    — agents spawned by `agents teams add`, tracked in
+ *     `~/.agents/teams/agents/<id>/meta.json` with a PID the manager polls.
+ *   - `cloud`    — dispatched to Rush / Codex Cloud / Factory, tracked in
+ *     the SQLite cache at `~/.agents/cloud/tasks.db`.
+ *   - `headless` — bare `claude` / `codex` / `gemini` / `cursor-agent` /
+ *     `opencode` processes that don't belong to any of the above. Detected
+ *     by `ps` minus the PIDs we've already attributed.
+ *
+ * `running` vs `idle` is a secondary classification within the alive set:
+ * the process is holding its session file, but the file's mtime is older
+ * than ACTIVE_MTIME_WINDOW_MS, so it's probably waiting on the user.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+import { execSync } from 'child_process';
+import { listActiveTasks } from '../cloud/store.js';
+import { AgentManager } from '../teams/agents.js';
+const HOME = os.homedir();
+const LIVE_TERMINALS_FILE = path.join(HOME, '.agents', 'swarmify', 'live-terminals.json');
+/**
+ * A process is classified `running` if its session file was touched in the
+ * last 2 minutes. Every Claude/Codex tool-call appends an event, so a
+ * healthy session writes several times a minute.
+ */
+const ACTIVE_MTIME_WINDOW_MS = 2 * 60_000;
+/** Executables we recognize as agent CLIs when scanning the process table. */
+const AGENT_CLI_NAMES = {
+    claude: 'claude',
+    codex: 'codex',
+    gemini: 'gemini',
+    'cursor-agent': 'cursor',
+    opencode: 'opencode',
+};
+function isPidAlive(pid) {
+    if (!pid || pid < 1)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        return err?.code === 'EPERM';
+    }
+}
+/** Read swarmify's live-terminals registry, dedupe by sessionId, keep only pid-alive entries. */
+function readLiveTerminals() {
+    let raw;
+    try {
+        raw = fs.readFileSync(LIVE_TERMINALS_FILE, 'utf8');
+    }
+    catch {
+        return [];
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return [];
+    }
+    if (!parsed || typeof parsed !== 'object')
+        return [];
+    const merged = new Map();
+    for (const slice of Object.values(parsed)) {
+        for (const e of (slice?.entries ?? [])) {
+            if (!e?.sessionId || !isPidAlive(e.pid))
+                continue;
+            merged.set(e.sessionId, e);
+        }
+    }
+    return Array.from(merged.values());
+}
+/** Convert an absolute cwd to the Claude-project folder name (slashes → dashes). */
+function claudeProjectDirName(cwd) {
+    return cwd.replace(/\//g, '-');
+}
+/**
+ * Locate the active Claude session file for a process. If we know the session
+ * UUID (from terminal env or team parent), prefer the exact match. Otherwise
+ * fall back to the most-recent-mtime .jsonl in the project's folder.
+ */
+function findClaudeSessionFile(cwd, sessionId) {
+    const projectDir = path.join(HOME, '.claude', 'projects', claudeProjectDirName(cwd));
+    if (sessionId) {
+        const specific = path.join(projectDir, `${sessionId}.jsonl`);
+        if (fs.existsSync(specific))
+            return specific;
+    }
+    let files;
+    try {
+        files = fs.readdirSync(projectDir).filter(f => f.endsWith('.jsonl'));
+    }
+    catch {
+        return undefined;
+    }
+    let best = null;
+    for (const f of files) {
+        const p = path.join(projectDir, f);
+        try {
+            const m = fs.statSync(p).mtimeMs;
+            if (!best || m > best.mtime)
+                best = { path: p, mtime: m };
+        }
+        catch { /* file vanished between readdir and stat */ }
+    }
+    return best?.path;
+}
+function classifyActivity(sessionFile) {
+    if (!sessionFile)
+        return 'running';
+    try {
+        const mtimeMs = fs.statSync(sessionFile).mtimeMs;
+        return Date.now() - mtimeMs < ACTIVE_MTIME_WINDOW_MS ? 'running' : 'idle';
+    }
+    catch {
+        return 'running';
+    }
+}
+/** Live teams teammates. Reuses AgentManager which already polls PIDs via `kill -0`. */
+export async function listTeamsActive() {
+    const mgr = new AgentManager();
+    const running = await mgr.listRunning();
+    return running.map((a) => {
+        const sessionId = a.parentSessionId ?? a.remoteSessionId ?? undefined;
+        const sessionFile = a.agentType === 'claude' && a.cwd
+            ? findClaudeSessionFile(a.cwd, sessionId ?? undefined)
+            : undefined;
+        return {
+            context: 'teams',
+            kind: a.agentType,
+            pid: a.pid ?? undefined,
+            sessionId,
+            cwd: a.cwd ?? undefined,
+            label: a.name ?? undefined,
+            sessionFile,
+            startedAtMs: a.startedAt.getTime(),
+            status: classifyActivity(sessionFile),
+            teamName: a.taskName,
+            agentId: a.agentId,
+        };
+    });
+}
+/** Live editor-terminal agents across every IDE window. */
+export function listTerminalsActive() {
+    const entries = readLiveTerminals();
+    if (entries.length === 0)
+        return [];
+    // Walk the shell PIDs through the process table once so we can name the host
+    // (code / cursor / codium) per entry rather than a generic 'terminal'.
+    const procByPid = new Map();
+    for (const r of readProcessTable())
+        procByPid.set(r.pid, r);
+    return entries.map((t) => {
+        const sessionFile = t.kind === 'claude' && t.cwd
+            ? findClaudeSessionFile(t.cwd, t.sessionId)
+            : undefined;
+        return {
+            context: 'terminal',
+            kind: t.kind,
+            host: detectHost(t.pid, procByPid),
+            pid: t.pid,
+            sessionId: t.sessionId,
+            cwd: t.cwd ?? undefined,
+            label: t.label ?? undefined,
+            sessionFile,
+            startedAtMs: t.startedAtMs,
+            status: classifyActivity(sessionFile),
+        };
+    });
+}
+/** Cloud tasks still in a non-terminal state. `tasks.db` may not exist; that's fine. */
+export function listCloudActive() {
+    let tasks;
+    try {
+        tasks = listActiveTasks();
+    }
+    catch {
+        return [];
+    }
+    return tasks.map((t) => ({
+        context: 'cloud',
+        kind: t.agent || 'cloud',
+        label: t.prompt.length > 60 ? t.prompt.slice(0, 57) + '...' : t.prompt,
+        startedAtMs: Date.parse(t.createdAt) || undefined,
+        status: t.status === 'running'
+            ? 'running'
+            : t.status === 'input_required'
+                ? 'input_required'
+                : 'queued',
+        cloudProvider: t.provider,
+        cloudTaskId: t.id,
+        cloudStatus: t.status,
+    }));
+}
+/**
+ * Ordered ancestor-process matchers. First match wins (most specific to least),
+ * so an IDE renderer is preferred over the terminal-app that launched the IDE,
+ * and a terminal-app is preferred over the multiplexer inside it.
+ */
+const HOST_MATCHERS = [
+    // IDE renderers (Electron helper processes)
+    { host: 'code', tokens: ['Code Helper', 'Code - Insiders Helper'] },
+    { host: 'cursor', tokens: ['Cursor Helper'] },
+    { host: 'codium', tokens: ['VSCodium Helper'] },
+    { host: 'windsurf', tokens: ['Windsurf Helper'] },
+    // Native terminal apps
+    { host: 'iterm', tokens: ['iTerm2', 'iTermServer', 'iTerm'] },
+    { host: 'terminal', tokens: ['Terminal.app', '/Applications/Utilities/Terminal.app'] },
+    { host: 'warp', tokens: ['Warp.app', 'stable_'] },
+    { host: 'alacritty', tokens: ['alacritty', 'Alacritty'] },
+    { host: 'kitty', tokens: ['kitty'] },
+    { host: 'hyper', tokens: ['Hyper.app', 'Hyper Helper'] },
+    { host: 'wezterm', tokens: ['wezterm', 'WezTerm'] },
+    { host: 'ghostty', tokens: ['ghostty', 'Ghostty'] },
+    // Multiplexers (fallback — only if no UI found above them)
+    { host: 'tmux', tokens: ['tmux'] },
+    { host: 'screen', tokens: ['screen'] },
+];
+/**
+ * Snapshot the whole process table in one `ps` call. Includes ppid so we can
+ * walk ancestry chains to attribute child processes to their terminal hosts.
+ * `comm` may be an absolute path for shim-launched agents, so basename before
+ * matching against AGENT_CLI_NAMES.
+ */
+function readProcessTable() {
+    let out;
+    try {
+        out = execSync('ps -A -o pid=,ppid=,comm=', { encoding: 'utf8' });
+    }
+    catch {
+        return [];
+    }
+    const rows = [];
+    for (const line of out.split('\n')) {
+        const m = line.trim().match(/^(\d+)\s+(\d+)\s+(.+)$/);
+        if (!m)
+            continue;
+        const pid = parseInt(m[1], 10);
+        const ppid = parseInt(m[2], 10);
+        if (!Number.isFinite(pid) || !Number.isFinite(ppid))
+            continue;
+        const commRaw = m[3].trim();
+        const kind = AGENT_CLI_NAMES[path.basename(commRaw)];
+        rows.push({ pid, ppid, comm: commRaw, kind });
+    }
+    return rows;
+}
+/**
+ * True when any ancestor in pid's parent chain is a known attributed PID.
+ * VS Code / Cursor terminals store the *shell* PID in live-terminals.json,
+ * while `ps` reports the *child* claude PID, so a direct set lookup misses.
+ */
+function hasAttributedAncestor(pid, ppidMap, attributed) {
+    let cur = ppidMap.get(pid);
+    const seen = new Set();
+    while (cur && cur > 1 && !seen.has(cur)) {
+        if (attributed.has(cur))
+            return true;
+        seen.add(cur);
+        cur = ppidMap.get(cur);
+    }
+    return false;
+}
+/**
+ * Resolve a process's current working directory via `lsof`. The `-a` flag
+ * ANDs the filters; without it macOS treats `-p` and `-d` as a union and
+ * returns the cwd of every process on the system.
+ */
+function getCwdForPid(pid) {
+    let out;
+    try {
+        out = execSync(`lsof -a -p ${pid} -d cwd -Fn 2>/dev/null`, { encoding: 'utf8' });
+    }
+    catch {
+        return undefined;
+    }
+    for (const line of out.split('\n')) {
+        if (line.startsWith('n'))
+            return line.slice(1);
+    }
+    return undefined;
+}
+/**
+ * Walk a pid's ancestor chain and return the most specific host app found.
+ * Checks each HOST_MATCHERS entry against every ancestor, returns the first
+ * host whose tokens match — so IDEs beat terminal apps, terminals beat
+ * multiplexers. Returns undefined if nothing is recognised (true headless).
+ */
+function detectHost(pid, procByPid) {
+    const chain = [];
+    let cur = procByPid.get(pid)?.ppid;
+    const seen = new Set();
+    while (cur && cur > 1 && !seen.has(cur)) {
+        const row = procByPid.get(cur);
+        if (!row)
+            break;
+        chain.push(row.comm);
+        seen.add(cur);
+        cur = row.ppid;
+    }
+    for (const { host, tokens } of HOST_MATCHERS) {
+        if (chain.some(c => tokens.some(t => c.includes(t))))
+            return host;
+    }
+    return undefined;
+}
+/** IDE / terminal / multiplexer hosts all count as UI-hosted. Absence = truly headless. */
+const UI_HOSTS = new Set([
+    'code', 'cursor', 'codium', 'windsurf',
+    'iterm', 'terminal', 'warp', 'alacritty', 'kitty', 'hyper', 'wezterm', 'ghostty',
+    'tmux', 'screen',
+]);
+/**
+ * Agent processes not attributed to a team or the swarmify registry.
+ * Classified by walking the ppid chain: any recognised UI ancestor (IDE
+ * helper, terminal-app, or multiplexer) means `terminal`; nothing of the
+ * sort means `headless` (daemon, launchd-spawned, orphan).
+ */
+export function listUnattributedActive(attributed) {
+    const table = readProcessTable();
+    const procByPid = new Map();
+    const ppidMap = new Map();
+    for (const r of table) {
+        procByPid.set(r.pid, r);
+        ppidMap.set(r.pid, r.ppid);
+    }
+    const out = [];
+    for (const { pid, kind } of table) {
+        if (!kind)
+            continue;
+        if (attributed.has(pid))
+            continue;
+        if (hasAttributedAncestor(pid, ppidMap, attributed))
+            continue;
+        const cwd = getCwdForPid(pid);
+        const sessionFile = kind === 'claude' && cwd ? findClaudeSessionFile(cwd) : undefined;
+        const host = detectHost(pid, procByPid);
+        const context = host && UI_HOSTS.has(host) ? 'terminal' : 'headless';
+        out.push({
+            context,
+            kind,
+            host,
+            pid,
+            cwd,
+            sessionFile,
+            status: classifyActivity(sessionFile),
+        });
+    }
+    return out;
+}
+/**
+ * Union of all four sources. Teams and terminals spawn actual CLI processes
+ * that also show up in `ps`, so headless attribution runs last with the
+ * already-attributed PIDs removed.
+ */
+export async function getActiveSessions(opts = {}) {
+    const [teams, terminals, cloud] = await Promise.all([
+        listTeamsActive().catch(() => []),
+        Promise.resolve(listTerminalsActive()),
+        Promise.resolve(listCloudActive()),
+    ]);
+    const knownPids = new Set();
+    for (const s of teams)
+        if (s.pid)
+            knownPids.add(s.pid);
+    for (const s of terminals)
+        if (s.pid)
+            knownPids.add(s.pid);
+    const unattributed = opts.skipHeadless ? [] : listUnattributedActive(knownPids);
+    return [...teams, ...terminals, ...cloud, ...unattributed];
+}
+//# sourceMappingURL=active.js.map

package/dist/lib/session/active.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active.js","sourceRoot":"","sources":["../../../src/lib/session/active.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AA8BlD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;AAC1B,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;AAE1F;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,CAAC,GAAG,MAAM,CAAC;AAE1C,8EAA8E;AAC9E,MAAM,eAAe,GAA2B;IAC9C,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,QAAQ;IACxB,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,GAAG,EAAE,IAAI,KAAK,OAAO,CAAC;IAC/B,CAAC;AACH,CAAC;AAWD,iGAAiG;AACjG,SAAS,iBAAiB;IACxB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAErD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAU,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAwB,EAAE,CAAC;YAC9D,IAAI,CAAC,CAAC,EAAE,SAAS,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,oFAAoF;AACpF,SAAS,oBAAoB,CAAC,GAAW;IACvC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,GAAW,EAAE,SAAkB;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IAErF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;QAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC/C,CAAC;IAED,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,IAAI,GAA2C,IAAI,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;gBAAE,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,EAAE,IAAI,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,WAA+B;IACvD,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;QACjD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,GAAG,GAAG,IAAI,YAAY,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAiB,EAAE;QACtC,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,eAAe,IAAI,SAAS,CAAC;QACtE,MAAM,WAAW,GACf,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG;YAC/B,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,IAAI,SAAS,CAAC;YACtD,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,CAAC,CAAC,SAAS;YACjB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,SAAS;YACvB,SAAS;YACT,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,SAAS;YACvB,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS;YAC1B,WAAW;YACX,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE;YAClC,MAAM,EAAE,gBAAgB,CAAC,WAAW,CAAC;YACrC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,6EAA6E;IAC7E,uEAAuE;IACvE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE;QAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAE5D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAiB,EAAE;QACtC,MAAM,WAAW,GACf,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG;YAC1B,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC;YAClC,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,SAAS;YACvB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,SAAS;YAC3B,WAAW;YACX,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,gBAAgB,CAAC,WAAW,CAAC;SACtC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,eAAe;IAC7B,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,eAAe,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAiB,EAAE,CAAC,CAAC;QACtC,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,OAAO;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;QACtE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,SAAS;QACjD,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB;gBAC7B,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,QAAQ;QACd,aAAa,EAAE,CAAC,CAAC,QAAQ;QACzB,WAAW,EAAE,CAAC,CAAC,EAAE;QACjB,WAAW,EAAE,CAAC,CAAC,MAAM;KACtB,CAAC,CAAC,CAAC;AACN,CAAC;AAID;;;;GAIG;AACH,MAAM,aAAa,GAA8C;IAC/D,4CAA4C;IAC5C,EAAE,IAAI,EAAE,MAAM,EAAM,MAAM,EAAE,CAAC,aAAa,EAAE,wBAAwB,CAAC,EAAE;IACvE,EAAE,IAAI,EAAE,QAAQ,EAAI,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE;IAC/C,EAAE,IAAI,EAAE,QAAQ,EAAI,MAAM,EAAE,CAAC,iBAAiB,CAAC,EAAE;IACjD,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,iBAAiB,CAAC,EAAE;IACjD,uBAAuB;IACvB,EAAE,IAAI,EAAE,OAAO,EAAK,MAAM,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE;IAChE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,cAAc,EAAE,sCAAsC,CAAC,EAAE;IACtF,EAAE,IAAI,EAAE,MAAM,EAAM,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE;IACrD,EAAE,IAAI,EAAE,WAAW,EAAC,MAAM,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE;IACxD,EAAE,IAAI,EAAE,OAAO,EAAK,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;IACvC,EAAE,IAAI,EAAE,OAAO,EAAK,MAAM,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE;IAC3D,EAAE,IAAI,EAAE,SAAS,EAAG,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;IACpD,EAAE,IAAI,EAAE,SAAS,EAAG,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;IACpD,2DAA2D;IAC3D,EAAE,IAAI,EAAE,MAAM,EAAM,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;IACtC,EAAE,IAAI,EAAE,QAAQ,EAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE;CACzC,CAAC;AAEF;;;;;GAKG;AACH,SAAS,gBAAgB;IACvB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,2BAA2B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9D,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,GAAW,EAAE,OAA4B,EAAE,UAAuB;IAC/F,IAAI,GAAG,GAAuB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,cAAc,GAAG,yBAAyB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,SAA+B;IAC9D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAuB,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,MAAM;QAChB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS;IAC/B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU;IACtC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;IAChF,MAAM,EAAE,QAAQ;CACjB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAuB;IAC5D,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,IAAI,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC;YAAE,SAAS;QAE9D,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,OAAO,GAAkB,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACpF,GAAG,CAAC,IAAI,CAAC;YACP,OAAO;YACP,IAAI;YACJ,IAAI;YACJ,GAAG;YACH,GAAG;YACH,WAAW;YACX,MAAM,EAAE,gBAAgB,CAAC,WAAW,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA2B,EAAE;IACnE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAqB,CAAC;QACpD,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACtC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;KACnC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,CAAC,CAAC,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,IAAI,CAAC,CAAC,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE3D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAEhF,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,EAAE,GAAG,YAAY,CAAC,CAAC;AAC7D,CAAC"}

package/dist/lib/shims.d.ts

@@ -49,8 +49,11 @@ export declare function promptConflictStrategy(conflictInfos: ConflictInfo[]): P
  *   v4 — project version marker changed from `.agents-version` to a
  *        root-level `agents.yaml`; shim now skips ~/.agents/agents.yaml
  *        when walking up for a project marker.
+ *   v5 — emit CODEX_HOME for codex shims so the versioned config (permissions,
+ *        sandbox_mode, rules/agents-deny.rules) is actually read by the codex
+ *        binary instead of $HOME/.codex.
  */
-export declare const SHIM_SCHEMA_VERSION = 4;
+export declare const SHIM_SCHEMA_VERSION = 5;
 /**
  * Generate the full bash shim script for the given agent. The returned string
  * is written to ~/.agents/shims/{cliCommand} and made executable.
@@ -75,8 +78,10 @@ export declare function removeShim(agent: AgentId): boolean;
  *   v2 — emit CLAUDE_CONFIG_DIR for claude aliases so each version has its
  *        own isolated config/OAuth slot; stamp a version marker so stale
  *        aliases can be detected and regenerated.
+ *   v3 — emit CODEX_HOME for codex aliases so direct `codex@X` invocations
+ *        read the versioned permissions/rules instead of $HOME/.codex.
  */
-export declare const VERSIONED_ALIAS_SCHEMA_VERSION = 2;
+export declare const VERSIONED_ALIAS_SCHEMA_VERSION = 3;
 /**
  * Generate a versioned alias script that directly execs a specific version.
  * e.g., claude@2.0.65 -> directly runs that version's binary

package/dist/lib/shims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shims.d.ts","sourceRoot":"","sources":["../../src/lib/shims.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAkD,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,CAAC;AA4BvB;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,MAAM,EAAE,CAiDhF;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,YAAY,EAAE,GAC5B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA+ClC;AAED;;;;;;;;;;;GAWG;AACH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAKrC;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAsJzD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAUjD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAWlD;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAKhD;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CA0BpF;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAY9F;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAEhF;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAW9G;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAU5E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAW7E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAK7E;AAuBD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CA6B7F;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAmDpE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,GACd;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CA2G1C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CA2D/D;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,IAAI;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAmBxF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAiBrE;AAsGD;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKlD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAYnE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGrD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAUnF;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIlD;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAcxE;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAIvC;AA8BD;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAgBjD;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA0EhH;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAmBrC;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtE,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,YAAY,CA8Ed;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAQ3D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,IAAI,CAiFN"}
+{"version":3,"file":"shims.d.ts","sourceRoot":"","sources":["../../src/lib/shims.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAkD,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,CAAC;AA4BvB;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,MAAM,EAAE,CAiDhF;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,YAAY,EAAE,GAC5B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA+ClC;AAED;;;;;;;;;;;GAWG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAKrC;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA6JzD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAUjD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAWlD;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAKhD;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAiCpF;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAY9F;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAEhF;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAW9G;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAU5E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAW7E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAK7E;AAuBD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CA6B7F;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAmDpE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,GACd;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CA2G1C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CA2D/D;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,IAAI;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAmBxF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAiBrE;AAsGD;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKlD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAYnE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGrD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAUnF;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIlD;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAcxE;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAIvC;AA8BD;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAgBjD;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA0EhH;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAmBrC;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtE,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,YAAY,CA8Ed;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAQ3D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,IAAI,CAiFN"}

package/dist/lib/shims.js

@@ -163,8 +163,11 @@ export async function promptConflictStrategy(conflictInfos) {
  *   v4 — project version marker changed from `.agents-version` to a
  *        root-level `agents.yaml`; shim now skips ~/.agents/agents.yaml
  *        when walking up for a project marker.
+ *   v5 — emit CODEX_HOME for codex shims so the versioned config (permissions,
+ *        sandbox_mode, rules/agents-deny.rules) is actually read by the codex
+ *        binary instead of $HOME/.codex.
  */
-export const SHIM_SCHEMA_VERSION = 4;
+export const SHIM_SCHEMA_VERSION = 5;
 /** Internal marker string used to embed the schema version in shim scripts. */
 const SHIM_VERSION_MARKER = 'agents-shim-version:';
 /**
@@ -182,7 +185,14 @@ export function generateShimScript(agent) {
 # live Claude account.
 export CLAUDE_CONFIG_DIR="$VERSION_DIR/home/${configDirName}"
 `
-        : '';
+        : agent === 'codex'
+            ? `
+# Codex reads its config (approval_policy, sandbox_mode, MCP servers, rules)
+# from CODEX_HOME. Point it at the versioned home so permissions/rules
+# written by agents-cli actually take effect.
+export CODEX_HOME="$VERSION_DIR/home/${configDirName}"
+`
+            : '';
     // Agents that don't natively resolve @-imports in their memory file need
     // agents-cli to recompile when the user edits a rule/preset file. The
     // check is fast (sha256 of ~8 small files) and skips the recompile when
@@ -356,8 +366,10 @@ export function removeShim(agent) {
  *   v2 — emit CLAUDE_CONFIG_DIR for claude aliases so each version has its
  *        own isolated config/OAuth slot; stamp a version marker so stale
  *        aliases can be detected and regenerated.
+ *   v3 — emit CODEX_HOME for codex aliases so direct `codex@X` invocations
+ *        read the versioned permissions/rules instead of $HOME/.codex.
  */
-export const VERSIONED_ALIAS_SCHEMA_VERSION = 2;
+export const VERSIONED_ALIAS_SCHEMA_VERSION = 3;
 /** Internal marker string used to embed the schema version in versioned alias scripts. */
 const VERSIONED_ALIAS_VERSION_MARKER = 'agents-versioned-alias-version:';
 /**
@@ -373,7 +385,14 @@ export function generateVersionedAliasScript(agent, version) {
 # version's config directory so direct aliases also switch the live account.
 export CLAUDE_CONFIG_DIR="$HOME/.agents/versions/${agent}/${version}/home/${configDirName}"
 `
-        : '';
+        : agent === 'codex'
+            ? `
+# Codex reads its config (approval_policy, sandbox_mode, MCP servers, rules)
+# from CODEX_HOME. Point direct aliases at the versioned home so permissions
+# and rules written by agents-cli actually take effect.
+export CODEX_HOME="$HOME/.agents/versions/${agent}/${version}/home/${configDirName}"
+`
+            : '';
     return `#!/bin/bash
 # Auto-generated by agents-cli - do not edit
 # ${VERSIONED_ALIAS_VERSION_MARKER} ${VERSIONED_ALIAS_SCHEMA_VERSION}