@the-librarian/cli 1.0.0-rc.3 → 1.0.0-rc.30

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/commands/install.d.ts

@@ -4,6 +4,12 @@ export interface InstallDeps {
     home?: string | undefined;
     shell?: Shell | undefined;
     prompter: Prompter;
+    /**
+     * The process environment to read existing `LIBRARIAN_*` vars from (BUG 2).
+     * Injectable so tests never read the real `process.env`. Defaults to
+     * `process.env`. The token value is never logged.
+     */
+    env?: NodeJS.ProcessEnv | undefined;
 }
 export interface InstallOutcome {
     installed: string[];

package/dist/commands/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAIvC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAG7C,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC1C,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,+EAA+E;AAC/E,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CA2D5F"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAIvC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAG7C,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC1C,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,+EAA+E;AAC/E,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CA2D5F"}

package/dist/commands/install.js

@@ -79,21 +79,73 @@ export async function runInstall(named, deps) {
  * Returns the in-memory config and whether it differs from what's persisted
  * (so the caller can defer the actual `setConfig` write until a harness
  * install has succeeded — S1). Does NOT touch the filesystem.
+ *
+ * Source precedence (BUG 2 — reuse existing `LIBRARIAN_*`):
+ *   1. `~/.librarian/env` already has BOTH values → use them, no prompts.
+ *   2. Otherwise, consult `process.env` (injected as `deps.env`):
+ *        - BOTH `LIBRARIAN_MCP_URL` + `LIBRARIAN_AGENT_TOKEN` present → offer
+ *          to reuse them (URL shown in full, token redacted to
+ *          `LIBRARIAN_AGENT_TOKEN=set` — the value is NEVER displayed). Accept
+ *          → use them; decline → prompt for fresh values.
+ *        - Only ONE present → prefill it as that prompt's default so the user
+ *          can accept with enter; prompt for the other.
+ *        - Neither → prompt for both (unchanged behaviour).
+ * The token value is never logged.
  */
 async function resolveConfig(deps) {
     const existing = readConfig(deps.home);
+    const env = deps.env ?? process.env;
+    const envUrl = (env.LIBRARIAN_MCP_URL ?? "").trim();
+    const envToken = (env.LIBRARIAN_AGENT_TOKEN ?? "").trim();
     let mcpUrl = existing?.mcpUrl ?? "";
     let token = existing?.token ?? "";
+    // When both env vars are present we offer to reuse them as a pair; if the
+    // user DECLINES we prompt for fresh values WITHOUT prefilling the rejected
+    // env defaults. A single env var, by contrast, prefills its prompt's default.
+    let declinedEnvPair = false;
+    // (2) Only consult the environment when the persisted config is incomplete.
+    if ((!mcpUrl || !token) && envUrl && envToken) {
+        // Both present → offer to reuse them, showing the URL but redacting the
+        // token (only that it's set, never its value).
+        const question = [
+            "Found these in your environment:",
+            `  LIBRARIAN_MCP_URL=${envUrl}`,
+            "  LIBRARIAN_AGENT_TOKEN=set",
+            "Use the LIBRARIAN_MCP_URL and LIBRARIAN_AGENT_TOKEN from your environment? [Y/n]",
+        ].join("\n");
+        const answer = await deps.prompter.promptText(question, { default: "y" });
+        if (isYes(answer)) {
+            if (!mcpUrl)
+                mcpUrl = envUrl;
+            if (!token)
+                token = envToken;
+        }
+        else {
+            declinedEnvPair = true;
+        }
+    }
+    // Prompt for anything still missing. When exactly one env var is present (and
+    // we didn't just decline the both-present pair), prefill it as the prompt's
+    // default so the user can accept it with a bare enter.
     if (!mcpUrl) {
-        mcpUrl = await deps.prompter.promptText("MCP URL");
+        const opts = envUrl && !declinedEnvPair ? { default: envUrl } : undefined;
+        mcpUrl = await deps.prompter.promptText("MCP URL", opts);
     }
     if (!token) {
-        token = await deps.prompter.promptText("Agent token", { secret: true });
+        // A secret prompt never echoes a default, but a present env token can still
+        // back an empty reply — so pass it as the default invisibly.
+        const opts = envToken && !declinedEnvPair ? { default: envToken, secret: true } : { secret: true };
+        token = await deps.prompter.promptText("Agent token", opts);
     }
     const changed = mcpUrl !== existing?.mcpUrl || token !== existing?.token;
     const cfg = { mcpUrl, token, serverUrl: deriveServerUrl(mcpUrl) };
     return { cfg, changed };
 }
+/** A yes/no answer parser — empty (bare enter) counts as yes given a "y" default. */
+function isYes(answer) {
+    const a = answer.trim().toLowerCase();
+    return a === "" || a === "y" || a === "yes";
+}
 /**
  * Resolve the harness set to install into:
  *   - explicit args (validated) win;

package/dist/commands/install.js.map

@@ -1 +1 @@
-{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,QAAQ;AACR,yEAAyE;AACzE,8EAA8E;AAC9E,4EAA4E;AAC5E,qEAAqE;AACrE,+EAA+E;AAC/E,+EAA+E;AAC/E,+DAA+D;AAC/D,uEAAuE;AACvE,2EAA2E;AAC3E,4DAA4D;AAC5D,wEAAwE;AAExE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAwB,MAAM,cAAc,CAAC;AAE5F,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAsB,MAAM,uBAAuB,CAAC;AAEtF,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAezD,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAe,EAAE,IAAiB;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAEnD,uBAAuB;IACvB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACrD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9E,CAAC;IAED,qDAAqD;IACrD,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,MAAM,MAAM,GAAqC,EAAE,CAAC;IAEpD,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAClC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACzC,SAAS;YACX,CAAC;YACD,mEAAmE;YACnE,uEAAuE;YACvE,IAAI,YAAY,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC1B,YAAY,GAAG,gBAAgB,CAAC;YAClC,CAAC;YAAC,OAAO,aAAa,EAAE,CAAC;gBACvB,YAAY,GAAG,2BAA2B,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC;YACxE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,YAAY,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,2BAA2B;IAC3B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5F,KAAK,CAAC,OAAO,CAAC,+DAA+D,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,6BAA6B;IAC7B,aAAa,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC1B,IAAiB;IAEjB,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,MAAM,GAAG,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC;IACpC,IAAI,KAAK,GAAG,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IAElC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,KAAK,QAAQ,EAAE,MAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,KAAK,CAAC;IACzE,MAAM,GAAG,GAAoB,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;IACnF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,KAAe,EACf,IAAiB,EACjB,KAAe;IAEf,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAkB,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qEAAqE;IACrE,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAChD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CACrD,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAC3D,CAAC;IACF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CACpB,KAAe,EACf,OAIC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IACE,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAC5B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,kFAAkF,CACnF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,QAAQ;AACR,yEAAyE;AACzE,8EAA8E;AAC9E,4EAA4E;AAC5E,qEAAqE;AACrE,+EAA+E;AAC/E,+EAA+E;AAC/E,+DAA+D;AAC/D,uEAAuE;AACvE,2EAA2E;AAC3E,4DAA4D;AAC5D,wEAAwE;AAExE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAwB,MAAM,cAAc,CAAC;AAE5F,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAsB,MAAM,uBAAuB,CAAC;AAEtF,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAqBzD,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAe,EAAE,IAAiB;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAEnD,uBAAuB;IACvB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACrD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9E,CAAC;IAED,qDAAqD;IACrD,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,MAAM,MAAM,GAAqC,EAAE,CAAC;IAEpD,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAClC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACzC,SAAS;YACX,CAAC;YACD,mEAAmE;YACnE,uEAAuE;YACvE,IAAI,YAAY,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC1B,YAAY,GAAG,gBAAgB,CAAC;YAClC,CAAC;YAAC,OAAO,aAAa,EAAE,CAAC;gBACvB,YAAY,GAAG,2BAA2B,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC;YACxE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,YAAY,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,2BAA2B;IAC3B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5F,KAAK,CAAC,OAAO,CAAC,+DAA+D,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,6BAA6B;IAC7B,aAAa,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,aAAa,CAC1B,IAAiB;IAEjB,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE1D,IAAI,MAAM,GAAG,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC;IACpC,IAAI,KAAK,GAAG,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IAElC,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,4EAA4E;IAC5E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9C,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,QAAQ,GAAG;YACf,kCAAkC;YAClC,uBAAuB,MAAM,EAAE;YAC/B,6BAA6B;YAC7B,kFAAkF;SACnF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM;gBAAE,MAAM,GAAG,MAAM,CAAC;YAC7B,IAAI,CAAC,KAAK;gBAAE,KAAK,GAAG,QAAQ,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,4EAA4E;IAC5E,uDAAuD;IACvD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,4EAA4E;QAC5E,6DAA6D;QAC7D,MAAM,IAAI,GACR,QAAQ,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACxF,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,KAAK,QAAQ,EAAE,MAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,KAAK,CAAC;IACzE,MAAM,GAAG,GAAoB,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;IACnF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,qFAAqF;AACrF,SAAS,KAAK,CAAC,MAAc;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,KAAe,EACf,IAAiB,EACjB,KAAe;IAEf,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAkB,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qEAAqE;IACrE,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAChD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CACrD,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAC3D,CAAC;IACF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CACpB,KAAe,EACf,OAIC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IACE,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAC5B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,kFAAkF,CACnF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9E,CAAC"}

package/dist/harnesses/codex.d.ts

@@ -1,3 +1,16 @@
 import type { HarnessModule } from "./types.js";
+export declare const CODEX_CAPTURE_PINNED_REF: string;
+/**
+ * Fetches the Codex capture integration for a pinned ref and returns the absolute
+ * path to a directory whose contents ARE the integration (the equivalent of
+ * `integrations/codex/`, i.e. holding `scripts/**` and `hooks/codex-hooks.json`).
+ * The caller copies from there. Injectable so tests substitute a local fixture
+ * instead of the network.
+ */
+export type CaptureFetcher = (ref: string) => Promise<string>;
+/** Override the capture-adapter fetcher (tests inject a local-fixture fetcher). */
+export declare function setCodexCaptureFetcher(next: CaptureFetcher): void;
+/** Restore the default (network) capture-adapter fetcher (tests). */
+export declare function resetCodexCaptureFetcher(): void;
 export declare const codex: HarnessModule;
 //# sourceMappingURL=codex.d.ts.map

package/dist/harnesses/codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/harnesses/codex.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAiB,aAAa,EAAE,MAAM,YAAY,CAAC;AA6F/D,eAAO,MAAM,KAAK,EAAE,aAuDnB,CAAC"}
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/harnesses/codex.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAiB,aAAa,EAAE,MAAM,YAAY,CAAC;AA0C/D,eAAO,MAAM,wBAAwB,QAAqB,CAAC;AAsF3D;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAmC9D,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAEjE;AAED,qEAAqE;AACrE,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA4HD,eAAO,MAAM,KAAK,EAAE,aAiDnB,CAAC"}

package/dist/harnesses/codex.js

@@ -16,9 +16,11 @@
 // it resolves the value at request time. We pass `cfg.mcpUrl` (not the
 // token) on the CLI, so nothing secret is ever logged.
 import fs from "node:fs";
+import os from "node:os";
 import path from "node:path";
 import { run, which } from "../exec.js";
-import { codexConfigPath } from "../paths.js";
+import { codexCaptureDir, codexConfigPath, codexHooksPath } from "../paths.js";
+import { cliVersion } from "../version.js";
 const CLI = "codex";
 const SERVER_ID = "librarian";
 const TOKEN_ENV_VAR = "LIBRARIAN_AGENT_TOKEN";
@@ -27,6 +29,37 @@ const TABLE_HEADER = "[mcp_servers.librarian]";
 // though TOML carries no native version for an MCP entry.
 const CONFIG_VERSION = "1";
 const VERSION_MARKER = "# librarian-config-version =";
+// ── Auto-capture hooks wiring (spec 2026-06-16-harness-auto-capture, Phase 2A) ─
+//
+// Codex fires the same command-hook events as Claude (UserPromptSubmit / Stop /
+// SessionEnd). Codex discovers lifecycle hooks ONLY at ~/.codex/hooks.json (no
+// plugin host auto-wires them), so — mirroring mem0's install_codex_hooks.py — we
+// MERGE our entries into that file (creating it if absent) and surface the
+// `codex_hooks = true` feature-flag requirement. The merge is idempotent: entries
+// we own are identified by an owner marker in the command string and stripped
+// before fresh ones are added, so re-install/upgrade leaves no duplicates.
+//
+// The capture-adapter scripts (integrations/codex/scripts/**) do NOT ship with
+// the published installer (it ships only dist/), so — exactly like the Hermes
+// adapter — we FETCH them from the pinned release tarball and copy them under
+// ~/.librarian/codex-capture; the merged hook commands point their
+// ${LIBRARIAN_CODEX_ROOT} placeholder at that dir.
+//
+// ASSUMPTION (the one genuine unknown): the assumed hook events + payload shape
+// are derived from mem0's proven Codex wiring + the Claude payload (documented in
+// integrations/codex/scripts/lib/transcript.mjs). SC1 (true e2e against a running
+// Codex) is DEFERRED — there is no codex CLI on the build machine to confirm.
+// The placeholder in hooks/codex-hooks.json, rewritten to the absolute scripts
+// install dir at merge time. Matches the env var the entry shell reads.
+const ROOT_PLACEHOLDER = "${LIBRARIAN_CODEX_ROOT}";
+// Substring that identifies entries THIS installer owns (stable across install
+// paths), so the merge can strip + re-add idempotently. Mirrors mem0's
+// OWNER_MARKER = "mem0-plugin".
+const HOOKS_OWNER_MARKER = "the-librarian-codex";
+// The pinned monorepo release we fetch the adapter from: the tag matching this
+// CLI's own version. DERIVED (not hardcoded) so it can't drift — same rationale
+// as the Hermes adapter's PINNED_REF.
+export const CODEX_CAPTURE_PINNED_REF = `v${cliVersion()}`;
 /** Read config.toml, or "" if it doesn't exist yet. */
 function readConfig() {
     try {
@@ -106,6 +139,141 @@ function writeConfig(content) {
     fs.mkdirSync(path.dirname(file), { recursive: true });
     fs.writeFileSync(file, content, "utf8");
 }
+/** The default fetcher: codeload tarball → `tar` extract → integration dir. */
+const defaultCaptureFetcher = async (ref) => {
+    const url = `https://codeload.github.com/JimJafar/the-librarian/tar.gz/refs/tags/${ref}`;
+    const work = fs.mkdtempSync(path.join(os.tmpdir(), "librarian-codex-fetch-"));
+    const tarball = path.join(work, "src.tar.gz");
+    const res = await fetch(url, { redirect: "error" });
+    if (!res.ok) {
+        throw new Error(`Failed to fetch Codex capture adapter (${ref}): HTTP ${res.status}`);
+    }
+    const buf = Buffer.from(await res.arrayBuffer());
+    fs.writeFileSync(tarball, buf);
+    // codeload nests the integration at `the-librarian-<ref>/integrations/codex/**`
+    // — three leading path components. Strip them so `scripts/` + `hooks/` land at
+    // the extraction root, which is what the caller copies into ~/.librarian/.
+    const out = path.join(work, "adapter");
+    fs.mkdirSync(out, { recursive: true });
+    const extract = await run("tar", [
+        "-xzf",
+        tarball,
+        "-C",
+        out,
+        "--strip-components=3",
+        "--wildcards",
+        "*/integrations/codex/*",
+    ]);
+    if (extract.code !== 0) {
+        throw new Error(`Failed to extract Codex capture adapter: ${(extract.stderr || "").trim()}`);
+    }
+    return out;
+};
+let captureFetcher = defaultCaptureFetcher;
+/** Override the capture-adapter fetcher (tests inject a local-fixture fetcher). */
+export function setCodexCaptureFetcher(next) {
+    captureFetcher = next;
+}
+/** Restore the default (network) capture-adapter fetcher (tests). */
+export function resetCodexCaptureFetcher() {
+    captureFetcher = defaultCaptureFetcher;
+}
+/** Recursively copy a directory tree, overwriting any prior copy (idempotent). */
+function copyDir(from, to) {
+    fs.rmSync(to, { recursive: true, force: true });
+    fs.mkdirSync(path.dirname(to), { recursive: true });
+    fs.cpSync(from, to, { recursive: true });
+}
+/** Read ~/.codex/hooks.json, or an empty shape if absent/unparseable. */
+function readHooksFile() {
+    try {
+        const raw = fs.readFileSync(codexHooksPath(), "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+            return parsed;
+        }
+    }
+    catch {
+        // absent / unreadable / malformed — start from an empty shape
+    }
+    return { hooks: {} };
+}
+function writeHooksFile(config) {
+    const file = codexHooksPath();
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, `${JSON.stringify(config, null, 2)}\n`, "utf8");
+}
+/** Does this entry belong to us (owner marker in any command string)? */
+function isOwnedEntry(entry) {
+    return (entry.hooks ?? []).some((h) => typeof h.command === "string" && h.command.includes(HOOKS_OWNER_MARKER));
+}
+/** Remove every entry we own from a hooks file (so a re-merge can't duplicate). */
+function stripOwnedEntries(config) {
+    const hooks = config.hooks ?? {};
+    for (const event of Object.keys(hooks)) {
+        hooks[event] = (hooks[event] ?? []).filter((e) => !isOwnedEntry(e));
+        if (hooks[event].length === 0)
+            delete hooks[event];
+    }
+    config.hooks = hooks;
+    return config;
+}
+/**
+ * Load our hooks template, rewrite the ${LIBRARIAN_CODEX_ROOT} placeholder to the
+ * absolute scripts dir, and return the parsed shape. The template lives in the
+ * fetched integration dir alongside the scripts it points at.
+ */
+function loadTemplate(integrationDir, scriptsRoot) {
+    const raw = fs.readFileSync(path.join(integrationDir, "hooks", "codex-hooks.json"), "utf8");
+    // JSON-string-escape the path so a backslash (Windows) can't break the JSON.
+    const safe = JSON.stringify(scriptsRoot).slice(1, -1);
+    const rewritten = raw.split(ROOT_PLACEHOLDER).join(safe);
+    return JSON.parse(rewritten);
+}
+/** Merge template entries onto a (stripped) config, appending per event. */
+function mergeTemplate(config, template) {
+    const hooks = (config.hooks ??= {});
+    for (const [event, entries] of Object.entries(template.hooks ?? {})) {
+        // Only `template.hooks` is iterated, so the template's top-level "//" doc key
+        // (a sibling of `hooks`, not inside it) is never carried over — excluded
+        // structurally, no filtering needed here.
+        (hooks[event] ??= []).push(...entries);
+    }
+    return config;
+}
+/** True iff `codex_hooks = true` is set under [features] in config.toml. */
+function captureFeatureFlagEnabled(config) {
+    for (const line of config.split("\n")) {
+        // Strip an inline comment, then collapse whitespace, so `codex_hooks = true`
+        // (any spacing) matches but a `# codex_hooks = true` comment does not.
+        const stripped = (line.split("#", 1)[0] ?? "").trim().replace(/\s+/g, "");
+        if (stripped === "codex_hooks=true")
+            return true;
+    }
+    return false;
+}
+/**
+ * Wire (or re-wire) the per-turn capture hooks: fetch + copy the adapter scripts,
+ * then idempotently merge our entries into ~/.codex/hooks.json. Returns whether
+ * the user still needs to enable the `codex_hooks` feature flag (so the caller can
+ * surface the hint, mirroring mem0's print_feature_flag_hint).
+ */
+async function installCaptureHooks() {
+    const integrationDir = await captureFetcher(CODEX_CAPTURE_PINNED_REF);
+    const scriptsRoot = codexCaptureDir();
+    copyDir(integrationDir, scriptsRoot);
+    const template = loadTemplate(integrationDir, scriptsRoot);
+    const config = stripOwnedEntries(readHooksFile());
+    writeHooksFile(mergeTemplate(config, template));
+    return { featureFlagNeeded: !captureFeatureFlagEnabled(readConfig()) };
+}
+/** Remove our capture wiring: strip owned hook entries + delete the scripts dir. */
+function uninstallCaptureHooks() {
+    if (fs.existsSync(codexHooksPath())) {
+        writeHooksFile(stripOwnedEntries(readHooksFile()));
+    }
+    fs.rmSync(codexCaptureDir(), { recursive: true, force: true });
+}
 export const codex = {
     id: "codex",
     displayName: "Codex",
@@ -117,32 +285,20 @@ export const codex = {
         return { installed: true, version };
     },
     async install(cfg) {
-        if (await which(CLI)) {
-            // Idempotent: if our table is already present, do nothing.
-            if (hasTable(readConfig()))
-                return;
-            const result = await run(CLI, [
-                "mcp",
-                "add",
-                SERVER_ID,
-                "--url",
-                cfg.mcpUrl,
-                "--bearer-token-env-var",
-                TOKEN_ENV_VAR,
-            ]);
-            if (result.code !== 0) {
-                throw new Error(`codex mcp add failed: ${oneLine(result.stderr || result.stdout)}`);
-            }
-            // Stamp our config-shape version alongside the CLI-written table so
-            // detect can report it (the CLI doesn't write the marker comment).
-            stampVersionIfMissing();
-            return;
+        // Two independently-idempotent halves: (1) the MCP server table (the tools +
+        // primer surface) and (2) the per-turn auto-capture hooks. Both run on every
+        // install so a second install repairs either half if only one is present.
+        await installMcpTable(cfg);
+        const { featureFlagNeeded } = await installCaptureHooks();
+        // Codex won't FIRE lifecycle hooks until `codex_hooks = true` is set under
+        // [features] in config.toml (mirrors mem0's print_feature_flag_hint). We can't
+        // edit a TOML table the user owns safely from here, so we SURFACE the one-time
+        // requirement on stderr. Fail-soft: this is a hint, never a hard failure.
+        if (featureFlagNeeded) {
+            process.stderr.write(`\nCodex auto-capture is wired, but Codex won't run the hooks until you enable the\n` +
+                `feature flag. Add this to ${codexConfigPath()}:\n\n` +
+                `  [features]\n  codex_hooks = true\n\nThen restart Codex.\n`);
         }
-        // Fallback: no `codex` on PATH. We can still write the config file.
-        const config = readConfig();
-        if (hasTable(config))
-            return; // idempotent
-        writeConfig(withTable(config, cfg));
     },
     async uninstall() {
         if (await which(CLI)) {
@@ -155,12 +311,47 @@ export const codex = {
         if (hasTable(config) || parseConfigVersion(config) !== undefined) {
             writeConfig(withoutTable(config));
         }
+        // Remove the auto-capture wiring (owned hook entries + the scripts dir).
+        uninstallCaptureHooks();
     },
     async update(cfg) {
         // Re-applying is idempotent; install short-circuits when present.
         await this.install(cfg);
     },
 };
+/**
+ * Install/repair just the MCP server table — the original Codex wiring. Prefers
+ * the native `codex` CLI; falls back to editing config.toml directly when the CLI
+ * isn't on PATH. Idempotent (a present table is a no-op).
+ */
+async function installMcpTable(cfg) {
+    if (await which(CLI)) {
+        // Idempotent: if our table is already present, do nothing.
+        if (hasTable(readConfig()))
+            return;
+        const result = await run(CLI, [
+            "mcp",
+            "add",
+            SERVER_ID,
+            "--url",
+            cfg.mcpUrl,
+            "--bearer-token-env-var",
+            TOKEN_ENV_VAR,
+        ]);
+        if (result.code !== 0) {
+            throw new Error(`codex mcp add failed: ${oneLine(result.stderr || result.stdout)}`);
+        }
+        // Stamp our config-shape version alongside the CLI-written table so
+        // detect can report it (the CLI doesn't write the marker comment).
+        stampVersionIfMissing();
+        return;
+    }
+    // Fallback: no `codex` on PATH. We can still write the config file.
+    const config = readConfig();
+    if (hasTable(config))
+        return; // idempotent
+    writeConfig(withTable(config, cfg));
+}
 /** If the table exists but our version marker doesn't, add the marker. */
 function stampVersionIfMissing() {
     const config = readConfig();