@tryglen/cli 0.4.1 → 0.5.1

package/dist/_utils/codex-app-server.d.ts

@@ -0,0 +1,11 @@
+import { type Result } from "./result.js";
+type CodexHookEntry = {
+    readonly key: string;
+    readonly command: string;
+    readonly source: string;
+    readonly currentHash: string;
+    readonly trustStatus: string;
+};
+declare const listCodexHooks: (cwd: string) => Promise<Result<CodexHookEntry[], string>>;
+export { listCodexHooks };
+export type { CodexHookEntry };

package/dist/_utils/codex-app-server.js

@@ -0,0 +1,90 @@
+import { spawn } from "node:child_process";
+import { err, ok } from "./result.js";
+import { cliVersion } from "./version.js";
+const TIMEOUT_MS = 15_000;
+const extractEntries = (msg) => {
+    const result = msg.result;
+    if (!result || !Array.isArray(result.data))
+        return null;
+    const entries = [];
+    for (const item of result.data) {
+        if (!Array.isArray(item.hooks))
+            continue;
+        for (const h of item.hooks) {
+            if (typeof h.key === "string" &&
+                typeof h.command === "string" &&
+                typeof h.source === "string" &&
+                typeof h.currentHash === "string" &&
+                typeof h.trustStatus === "string") {
+                entries.push({
+                    key: h.key,
+                    command: h.command,
+                    source: h.source,
+                    currentHash: h.currentHash,
+                    trustStatus: h.trustStatus,
+                });
+            }
+        }
+    }
+    return entries;
+};
+const rpc = (id, method, params) => `${JSON.stringify({ jsonrpc: "2.0", id, method, params })}\n`;
+const listCodexHooks = (cwd) => new Promise((resolve) => {
+    const child = spawn("codex", ["app-server"], {
+        stdio: ["pipe", "pipe", "ignore"],
+    });
+    const finish = (r) => {
+        clearTimeout(timer);
+        child.kill();
+        resolve(r);
+    };
+    const timer = setTimeout(() => finish(err("codex app-server timed out")), TIMEOUT_MS);
+    child.on("error", () => finish(err("could not spawn codex app-server")));
+    child.on("close", () => finish(err("codex app-server exited before answering")));
+    const state = { buf: "" };
+    child.stdout.on("data", (chunk) => {
+        state.buf += chunk.toString();
+        const lines = state.buf.split("\n");
+        state.buf = lines.pop() ?? "";
+        for (const line of lines) {
+            if (line.trim() === "")
+                continue;
+            const parsed = (() => {
+                try {
+                    return JSON.parse(line);
+                }
+                catch {
+                    return null;
+                }
+            })();
+            if (!parsed || typeof parsed !== "object")
+                continue;
+            const id = parsed.id;
+            const rpcError = parsed.error;
+            if ((id === 1 || id === 2) && rpcError) {
+                const msg = typeof rpcError.message === "string"
+                    ? rpcError.message
+                    : "unknown error";
+                finish(err(`codex app-server error: ${msg}`));
+                continue;
+            }
+            if (id === 1) {
+                child.stdin.write(rpc(2, "hooks/list", { cwds: [cwd] }));
+            }
+            if (id === 2) {
+                const entries = extractEntries(parsed);
+                finish(entries ? ok(entries) : err("unexpected hooks/list response shape"));
+            }
+        }
+    });
+    // Defer the handshake one microtask so an immediate spawn failure
+    // (ENOENT — codex not installed) wins the race and resolves err before
+    // we start talking to a process that never existed.
+    queueMicrotask(() => {
+        child.stdin.write(rpc(1, "initialize", {
+            clientInfo: { name: "glen", title: "glen CLI", version: cliVersion },
+        }));
+    });
+});
+export { listCodexHooks };
+//# sourceMappingURL=codex-app-server.js.map

package/dist/_utils/codex-app-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-app-server.js","sourceRoot":"","sources":["../../src/_utils/codex-app-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAe,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAe1C,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,cAAc,GAAG,CAAC,GAAY,EAA2B,EAAE;IAC/D,MAAM,MAAM,GAAI,GAAuC,CAAC,MAAM,CAAC;IAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAA6B,EAAE,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACzC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAkC,EAAE,CAAC;YACxD,IACE,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;gBACzB,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;gBAC7B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAC5B,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;gBACjC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EACjC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,MAAc,EAAE,MAAe,EAAU,EAAE,CAClE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC;AAEhE,MAAM,cAAc,GAAG,CACrB,GAAW,EACgC,EAAE,CAC7C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE;QAC3C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;KAClC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,CAAC,CAAmC,EAAQ,EAAE;QAC3D,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,KAAK,CAAC,IAAI,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,CAAC,CAAC;IACb,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,EAC/C,UAAU,CACX,CAAC;IAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC;IACzE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CACrB,MAAM,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CACxD,CAAC;IAEF,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC1B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YACjC,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE;gBAC5B,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,SAAS;YACpD,MAAM,EAAE,GAAI,MAA2B,CAAC,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAI,MAA4C,CAAC,KAAK,CAAC;YACrE,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACvC,MAAM,GAAG,GACP,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;oBAClC,CAAC,CAAC,QAAQ,CAAC,OAAO;oBAClB,CAAC,CAAC,eAAe,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBACb,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM,CACJ,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sCAAsC,CAAC,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,uEAAuE;IACvE,oDAAoD;IACpD,cAAc,CAAC,GAAG,EAAE;QAClB,KAAK,CAAC,KAAK,CAAC,KAAK,CACf,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE;YACnB,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE;SACrE,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/_utils/codex-hooks-merge.d.ts

@@ -0,0 +1,20 @@
+declare const GLEN_CODEX_HOOK_ENTRIES: {
+    readonly SessionStart: "glen session-start --agent codex";
+    readonly UserPromptSubmit: "glen ingest --agent codex";
+};
+declare const GLEN_OWNER_PREFIX = "glen ";
+type HookHandler = {
+    type: string;
+    command: string;
+} & Record<string, unknown>;
+type MatcherGroup = {
+    hooks: HookHandler[];
+} & Record<string, unknown>;
+type HooksFile = {
+    hooks: Record<string, MatcherGroup[]>;
+};
+declare const normalizeHooksFile: (parsed: unknown) => HooksFile | null;
+declare const stripGlenHooks: (file: HooksFile) => HooksFile;
+declare const withGlenHooks: (file: HooksFile) => HooksFile;
+export { GLEN_CODEX_HOOK_ENTRIES, GLEN_OWNER_PREFIX, normalizeHooksFile, stripGlenHooks, withGlenHooks, };
+export type { HooksFile };

package/dist/_utils/codex-hooks-merge.js

@@ -0,0 +1,63 @@
+// The canonical glen hook lines for Codex. FROZEN: must stay identical to
+// packages/codex-plugin/hooks/hooks.json (enforced by ingest.contract.test.ts).
+const GLEN_CODEX_HOOK_ENTRIES = {
+    SessionStart: "glen session-start --agent codex",
+    UserPromptSubmit: "glen ingest --agent codex",
+};
+// Owner marker: any handler whose command starts with "glen " is ours.
+// Our commands are bare global-CLI invocations (no absolute paths), so this
+// prefix is stable across machines and versions.
+const GLEN_OWNER_PREFIX = "glen ";
+const isGlenHandler = (h) => typeof h.command === "string" &&
+    h.command.trimStart().startsWith(GLEN_OWNER_PREFIX);
+const isMatcherGroup = (g) => typeof g === "object" &&
+    g !== null &&
+    Array.isArray(g.hooks);
+// Accepts Codex's wrapped form {"hooks": {...}} and the legacy root-level
+// form (events at the JSON root — older supermemory versions wrote this).
+// Returns null for anything that doesn't look like a hooks file (caller
+// backs the file up and starts fresh).
+const normalizeHooksFile = (parsed) => {
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        return null;
+    }
+    const obj = parsed;
+    const root = typeof obj.hooks === "object" &&
+        obj.hooks !== null &&
+        !Array.isArray(obj.hooks)
+        ? obj.hooks
+        : obj;
+    const events = {};
+    for (const [event, value] of Object.entries(root)) {
+        if (!Array.isArray(value) || !value.every(isMatcherGroup))
+            return null;
+        events[event] = value;
+    }
+    return { hooks: events };
+};
+const stripGlenHooks = (file) => {
+    const events = {};
+    for (const [event, groups] of Object.entries(file.hooks)) {
+        const kept = groups
+            .map((g) => ({ ...g, hooks: g.hooks.filter((h) => !isGlenHandler(h)) }))
+            .filter((g) => g.hooks.length > 0);
+        if (kept.length > 0)
+            events[event] = kept;
+    }
+    return { hooks: events };
+};
+// Idempotent strip-and-replace: remove any glen-owned entries, then append
+// the canonical ones. Other tools' groups are preserved verbatim.
+const withGlenHooks = (file) => {
+    const base = stripGlenHooks(file);
+    const events = { ...base.hooks };
+    for (const [event, command] of Object.entries(GLEN_CODEX_HOOK_ENTRIES)) {
+        events[event] = [
+            ...(events[event] ?? []),
+            { hooks: [{ type: "command", command }] },
+        ];
+    }
+    return { hooks: events };
+};
+export { GLEN_CODEX_HOOK_ENTRIES, GLEN_OWNER_PREFIX, normalizeHooksFile, stripGlenHooks, withGlenHooks, };
+//# sourceMappingURL=codex-hooks-merge.js.map

package/dist/_utils/codex-hooks-merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hooks-merge.js","sourceRoot":"","sources":["../../src/_utils/codex-hooks-merge.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,gFAAgF;AAChF,MAAM,uBAAuB,GAAG;IAC9B,YAAY,EAAE,kCAAkC;IAChD,gBAAgB,EAAE,2BAA2B;CACrC,CAAC;AAEX,uEAAuE;AACvE,4EAA4E;AAC5E,iDAAiD;AACjD,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAMlC,MAAM,aAAa,GAAG,CAAC,CAAc,EAAW,EAAE,CAChD,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;IAC7B,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAEtD,MAAM,cAAc,GAAG,CAAC,CAAU,EAAqB,EAAE,CACvD,OAAO,CAAC,KAAK,QAAQ;IACrB,CAAC,KAAK,IAAI;IACV,KAAK,CAAC,OAAO,CAAE,CAA6B,CAAC,KAAK,CAAC,CAAC;AAEtD,0EAA0E;AAC1E,0EAA0E;AAC1E,wEAAwE;AACxE,uCAAuC;AACvC,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAoB,EAAE;IAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAC7B,GAAG,CAAC,KAAK,KAAK,IAAI;QAClB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QACvB,CAAC,CAAE,GAAG,CAAC,KAAiC;QACxC,CAAC,CAAC,GAAG,CAAC;IACV,MAAM,MAAM,GAAmC,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,IAAe,EAAa,EAAE;IACpD,MAAM,MAAM,GAAmC,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM;aAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACvE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF,2EAA2E;AAC3E,kEAAkE;AAClE,MAAM,aAAa,GAAG,CAAC,IAAe,EAAa,EAAE;IACnD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAmC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IACjE,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,GAAG;YACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACxB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,aAAa,GACd,CAAC"}

package/dist/_utils/codex-hooks-setup.d.ts

@@ -0,0 +1,8 @@
+import { type Result } from "./result.js";
+declare const isCodexHooksInstalled: () => Promise<boolean>;
+declare const installCodexHooks: () => Promise<Result<{
+    trusted: boolean;
+    backedUp: boolean;
+}, string>>;
+declare const uninstallCodexHooks: () => Promise<Result<void, string>>;
+export { installCodexHooks, isCodexHooksInstalled, uninstallCodexHooks };

package/dist/_utils/codex-hooks-setup.js

@@ -0,0 +1,152 @@
+import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { listCodexHooks } from "./codex-app-server.js";
+import { GLEN_OWNER_PREFIX, normalizeHooksFile, stripGlenHooks, withGlenHooks, } from "./codex-hooks-merge.js";
+import { codexConfigTomlPath, codexHooksJsonPath } from "./codex-paths.js";
+import { removeTrustBlocks, upsertTrustBlocks } from "./codex-trust-toml.js";
+import { err, fromPromise, ok } from "./result.js";
+import { statePath } from "./state.js";
+// Marker recording that THIS machine opted into glen's codex hooks (gates
+// doctor --auto self-repair so Claude-only users never get codex config
+// written). Lives next to state.json so GLEN_STATE_PATH overrides cover it.
+const markerPath = () => join(dirname(statePath()), "codex-hooks-installed.json");
+const parseJson = (raw) => {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+};
+// Reads the marker, tolerating the legacy `{installedAt}` payload (no
+// trustedKeys) — null means "not installed on this machine".
+const readMarker = async () => {
+    const raw = await fromPromise(readFile(markerPath(), "utf-8"));
+    if (!raw.ok)
+        return null;
+    const parsed = parseJson(raw.value);
+    const trustedKeys = Array.isArray(parsed?.trustedKeys)
+        ? parsed.trustedKeys.filter((k) => typeof k === "string")
+        : [];
+    return { trustedKeys };
+};
+const isCodexHooksInstalled = async () => (await readMarker()) !== null;
+const atomicWrite = async (filePath, content) => {
+    const mk = await fromPromise(mkdir(dirname(filePath), { recursive: true }));
+    if (!mk.ok)
+        return mk;
+    // pid suffix: interactive install and the detached doctor repair may race.
+    const tmp = `${filePath}.${process.pid}.tmp`;
+    const w = await fromPromise(writeFile(tmp, content));
+    if (!w.ok)
+        return w;
+    return fromPromise(rename(tmp, filePath));
+};
+// Reads + normalizes the existing hooks.json. `absent` distinguishes a
+// missing file from an empty one. Unparseable → backed up during install
+// (never clobber another tool's data silently) and treated as empty;
+// uninstall passes backupOnUnparseable=false and skips the rewrite instead.
+const readExistingHooks = async (backupOnUnparseable) => {
+    const hooksPath = codexHooksJsonPath();
+    const raw = await fromPromise(readFile(hooksPath, "utf-8"));
+    if (!raw.ok)
+        return ok({ file: { hooks: {} }, backedUp: false, absent: true });
+    const normalized = normalizeHooksFile(parseJson(raw.value));
+    if (normalized)
+        return ok({ file: normalized, backedUp: false, absent: false });
+    if (!backupOnUnparseable)
+        return ok({ file: { hooks: {} }, backedUp: true, absent: false });
+    const bak = `${hooksPath}.bak.${Date.now()}`;
+    const b = await fromPromise(writeFile(bak, raw.value));
+    if (!b.ok)
+        return err(`could not back up unparseable ${hooksPath}`);
+    return ok({ file: { hooks: {} }, backedUp: true, absent: false });
+};
+const glenEntriesFrom = (entries) => entries
+    .filter((e) => e.source === "user" &&
+    e.command.trimStart().startsWith(GLEN_OWNER_PREFIX))
+    .map((e) => ({ key: e.key, hash: e.currentHash }));
+// Write trust blocks for glen's user-layer hooks. Returns the keys written
+// (empty array = trust step failed; install still counts, manual fallback).
+const trustGlenHooks = async () => {
+    const listed = await listCodexHooks(process.cwd());
+    if (!listed.ok)
+        return [];
+    const entries = glenEntriesFrom(listed.value);
+    if (entries.length === 0)
+        return [];
+    const tomlPath = codexConfigTomlPath();
+    const existing = await fromPromise(readFile(tomlPath, "utf-8"));
+    const updated = upsertTrustBlocks(existing.ok ? existing.value : "", entries);
+    const w = await atomicWrite(tomlPath, updated);
+    return w.ok ? entries.map((e) => e.key) : [];
+};
+const installCodexHooks = async () => {
+    const existing = await readExistingHooks(true);
+    if (!existing.ok)
+        return existing;
+    const merged = withGlenHooks(existing.value.file);
+    const w = await atomicWrite(codexHooksJsonPath(), `${JSON.stringify(merged, null, 2)}\n`);
+    if (!w.ok)
+        return err(`could not write ${codexHooksJsonPath()}`);
+    const trustedKeys = await trustGlenHooks();
+    // The marker gates doctor self-heal AND records the trusted keys for
+    // uninstall — a silent failure here would strand the trust blocks.
+    const m = await atomicWrite(markerPath(), `${JSON.stringify({ installedAt: new Date().toISOString(), trustedKeys }, null, 2)}\n`);
+    if (!m.ok)
+        return err(`could not write install marker ${markerPath()}`);
+    return ok({
+        trusted: trustedKeys.length > 0,
+        backedUp: existing.value.backedUp,
+    });
+};
+// Removes glen's trust blocks from config.toml (no-op when the file is
+// unreadable or there is nothing to remove).
+const removeGlenTrustBlocks = async (keys) => {
+    if (keys.length === 0)
+        return ok(undefined);
+    const tomlPath = codexConfigTomlPath();
+    const raw = await fromPromise(readFile(tomlPath, "utf-8"));
+    if (!raw.ok)
+        return ok(undefined);
+    const updated = removeTrustBlocks(raw.value, keys);
+    const w = await atomicWrite(tomlPath, updated);
+    return w.ok ? ok(undefined) : err(`could not write ${tomlPath}`);
+};
+const uninstallCodexHooks = async () => {
+    const marker = await readMarker();
+    const existing = await readExistingHooks(false);
+    if (!existing.ok)
+        return existing;
+    // Clean machine (no hooks.json): never touch ~/.codex or spawn the
+    // app-server — only remove marker-recorded trust blocks if any.
+    if (existing.value.absent) {
+        const t = await removeGlenTrustBlocks(marker?.trustedKeys ?? []);
+        if (!t.ok)
+            return t;
+        await fromPromise(unlink(markerPath()));
+        return ok(undefined);
+    }
+    // Query keys BEFORE stripping — after the strip the entries are gone.
+    // Union with the marker's keys so cleanup works without codex on PATH.
+    const listed = await listCodexHooks(process.cwd());
+    const liveKeys = listed.ok
+        ? glenEntriesFrom(listed.value).map((e) => e.key)
+        : [];
+    const keys = [...new Set([...(marker?.trustedKeys ?? []), ...liveKeys])];
+    // Unparseable hooks.json (backedUp under backupOnUnparseable=false means
+    // "skip") → leave it alone; still clean up trust blocks + marker.
+    if (!existing.value.backedUp) {
+        const stripped = stripGlenHooks(existing.value.file);
+        const w = await atomicWrite(codexHooksJsonPath(), `${JSON.stringify(stripped, null, 2)}\n`);
+        if (!w.ok)
+            return err(`could not write ${codexHooksJsonPath()}`);
+    }
+    const t = await removeGlenTrustBlocks(keys);
+    if (!t.ok)
+        return t;
+    await fromPromise(unlink(markerPath()));
+    return ok(undefined);
+};
+export { installCodexHooks, isCodexHooksInstalled, uninstallCodexHooks };
+//# sourceMappingURL=codex-hooks-setup.js.map

package/dist/_utils/codex-hooks-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hooks-setup.js","sourceRoot":"","sources":["../../src/_utils/codex-hooks-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,iBAAiB,EAEjB,kBAAkB,EAClB,cAAc,EACd,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAe,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,0EAA0E;AAC1E,wEAAwE;AACxE,4EAA4E;AAC5E,MAAM,UAAU,GAAG,GAAW,EAAE,CAC9B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,4BAA4B,CAAC,CAAC;AAE3D,MAAM,SAAS,GAAG,CAAC,GAAW,EAAW,EAAE;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,sEAAsE;AACtE,6DAA6D;AAC7D,MAAM,UAAU,GAAG,KAAK,IAA+C,EAAE;IACvE,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAqC,CAAC;IACxE,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC;QACpD,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACtE,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,WAAW,EAAE,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,KAAK,IAAsB,EAAE,CACzD,CAAC,MAAM,UAAU,EAAE,CAAC,KAAK,IAAI,CAAC;AAEhC,MAAM,WAAW,GAAG,KAAK,EACvB,QAAgB,EAChB,OAAe,EACiB,EAAE;IAClC,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACtB,2EAA2E;IAC3E,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC7C,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IACpB,OAAO,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC;AAEF,uEAAuE;AACvE,yEAAyE;AACzE,qEAAqE;AACrE,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,KAAK,EAC7B,mBAA4B,EAG5B,EAAE;IACF,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE;QACT,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,IAAI,UAAU;QACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,mBAAmB;QACtB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,GAAG,SAAS,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7C,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,iCAAiC,SAAS,EAAE,CAAC,CAAC;IACpE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,OAKG,EAC8B,EAAE,CACnC,OAAO;KACJ,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,MAAM;IACnB,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CACtD;KACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAEvD,2EAA2E;AAC3E,4EAA4E;AAC5E,MAAM,cAAc,GAAG,KAAK,IAAuB,EAAE;IACnD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9E,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,KAAK,IAE7B,EAAE;IACF,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAElC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,MAAM,WAAW,CACzB,kBAAkB,EAAE,EACpB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACvC,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,mBAAmB,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAEjE,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAC;IAE3C,qEAAqE;IACrE,mEAAmE;IACnE,MAAM,CAAC,GAAG,MAAM,WAAW,CACzB,UAAU,EAAE,EACZ,GAAG,IAAI,CAAC,SAAS,CACf,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,EACtD,IAAI,EACJ,CAAC,CACF,IAAI,CACN,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,kCAAkC,UAAU,EAAE,EAAE,CAAC,CAAC;IAExE,OAAO,EAAE,CAAC;QACR,OAAO,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC;QAC/B,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ;KAClC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,uEAAuE;AACvE,6CAA6C;AAC7C,MAAM,qBAAqB,GAAG,KAAK,EACjC,IAAuB,EACQ,EAAE;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,KAAK,IAAmC,EAAE;IACpE,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAElC,mEAAmE;IACnE,gEAAgE;IAChE,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QACpB,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACxC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED,sEAAsE;IACtE,uEAAuE;IACvE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE;QACxB,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACjD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEzE,yEAAyE;IACzE,kEAAkE;IAClE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,MAAM,WAAW,CACzB,kBAAkB,EAAE,EACpB,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACzC,CAAC;QACF,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,mBAAmB,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IAEpB,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/_utils/codex-paths.d.ts

@@ -0,0 +1,4 @@
+declare const codexHome: () => string;
+declare const codexHooksJsonPath: () => string;
+declare const codexConfigTomlPath: () => string;
+export { codexHome, codexHooksJsonPath, codexConfigTomlPath };

package/dist/_utils/codex-paths.js

@@ -0,0 +1,10 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+// CODEX_HOME is Codex's own override for its config dir — honoring it means
+// tests AND the CI smoke sandbox the same way Codex does. An empty string is
+// treated as unset (|| not ??) so it can't yield relative paths.
+const codexHome = () => process.env.CODEX_HOME || join(homedir(), ".codex");
+const codexHooksJsonPath = () => join(codexHome(), "hooks.json");
+const codexConfigTomlPath = () => join(codexHome(), "config.toml");
+export { codexHome, codexHooksJsonPath, codexConfigTomlPath };
+//# sourceMappingURL=codex-paths.js.map

package/dist/_utils/codex-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-paths.js","sourceRoot":"","sources":["../../src/_utils/codex-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,4EAA4E;AAC5E,6EAA6E;AAC7E,iEAAiE;AACjE,MAAM,SAAS,GAAG,GAAW,EAAE,CAC7B,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAEtD,MAAM,kBAAkB,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;AAEzE,MAAM,mBAAmB,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AAE3E,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/_utils/codex-repair-trace.d.ts

@@ -0,0 +1,11 @@
+type RepairTrace = {
+    readonly at: string;
+    readonly ok: boolean;
+    readonly error?: string;
+};
+declare const writeRepairTrace: (outcome: {
+    ok: boolean;
+    error?: string;
+}) => Promise<void>;
+declare const readRepairTrace: () => Promise<RepairTrace | null>;
+export { readRepairTrace, writeRepairTrace };

package/dist/_utils/codex-repair-trace.js

@@ -0,0 +1,42 @@
+// Best-effort trace of the last detached codex-hooks repair, surfaced by
+// `glen doctor` (the repair child runs with stdio ignored — this file is
+// its only observable output). Lives next to state.json.
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { fromPromise } from "./result.js";
+import { statePath } from "./state.js";
+const tracePath = () => join(dirname(statePath()), "codex-repair.json");
+const writeRepairTrace = async (outcome) => {
+    const trace = {
+        at: new Date().toISOString(),
+        ok: outcome.ok,
+        ...(outcome.error ? { error: outcome.error } : {}),
+    };
+    const mk = await fromPromise(mkdir(dirname(tracePath()), { recursive: true }));
+    if (!mk.ok)
+        return;
+    await fromPromise(writeFile(tracePath(), `${JSON.stringify(trace, null, 2)}\n`));
+};
+const readRepairTrace = async () => {
+    const raw = await fromPromise(readFile(tracePath(), "utf-8"));
+    if (!raw.ok)
+        return null;
+    const parsed = (() => {
+        try {
+            return JSON.parse(raw.value);
+        }
+        catch {
+            return null;
+        }
+    })();
+    const t = parsed;
+    if (!t || typeof t.at !== "string" || typeof t.ok !== "boolean")
+        return null;
+    return {
+        at: t.at,
+        ok: t.ok,
+        ...(typeof t.error === "string" ? { error: t.error } : {}),
+    };
+};
+export { readRepairTrace, writeRepairTrace };
+//# sourceMappingURL=codex-repair-trace.js.map

package/dist/_utils/codex-repair-trace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-repair-trace.js","sourceRoot":"","sources":["../../src/_utils/codex-repair-trace.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,yEAAyE;AACzE,yDAAyD;AACzD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAQvC,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAEhF,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAG/B,EAAiB,EAAE;IAClB,MAAM,KAAK,GAAgB;QACzB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,WAAW,CAC1B,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CACjD,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,OAAO;IACnB,MAAM,WAAW,CACf,SAAS,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAC9D,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,KAAK,IAAiC,EAAE;IAC9D,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAY,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,CAAC,GAAG,MAAwC,CAAC;IACnD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/_utils/codex-trust-toml.d.ts

@@ -0,0 +1,7 @@
+type TrustEntry = {
+    readonly key: string;
+    readonly hash: string;
+};
+declare const removeTrustBlocks: (toml: string, keys: readonly string[]) => string;
+declare const upsertTrustBlocks: (toml: string, entries: readonly TrustEntry[]) => string;
+export { removeTrustBlocks, upsertTrustBlocks };

package/dist/_utils/codex-trust-toml.js

@@ -0,0 +1,42 @@
+// Surgical, line-based editing of Codex's user config.toml [hooks.state]
+// trust blocks. We deliberately do NOT parse/re-stringify the whole file —
+// that would destroy the user's comments and formatting. A block is the
+// exact header line `[hooks.state."<key>"]` plus every line until the next
+// `[` table header. Keys come verbatim from `codex app-server` hooks/list.
+const escapeKey = (key) => key.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+const headerFor = (key) => `[hooks.state."${escapeKey(key)}"]`;
+// Matches [hooks.state."<key>"] with optional whitespace, single- or
+// double-quoted key, and an optional trailing comment. Codex itself writes
+// the canonical tight form; the tolerance is cheap insurance against
+// alternate-but-valid spellings.
+const HEADER_RE = /^\s*\[\s*hooks\.state\s*\.\s*(?:"((?:[^"\\]|\\.)*)"|'([^']*)')\s*\]\s*(?:#.*)?$/;
+const unescapeKey = (raw) => raw.replace(/\\"/g, '"').replace(/\\\\/g, "\\");
+const headerKeyOf = (line) => {
+    const m = HEADER_RE.exec(line);
+    if (!m)
+        return null;
+    return m[1] !== undefined ? unescapeKey(m[1]) : (m[2] ?? null);
+};
+const isTableHeader = (line) => line.trimStart().startsWith("[");
+const removeTrustBlocks = (toml, keys) => {
+    const keySet = new Set(keys);
+    const result = toml.split("\n").reduce((acc, line) => {
+        const headerKey = headerKeyOf(line);
+        const startsBlock = headerKey !== null && keySet.has(headerKey);
+        const skipping = startsBlock || (acc.skipping && !isTableHeader(line));
+        if (!skipping)
+            acc.out.push(line);
+        return { out: acc.out, skipping };
+    }, { out: [], skipping: false });
+    return result.out.join("\n");
+};
+const upsertTrustBlocks = (toml, entries) => {
+    const cleaned = removeTrustBlocks(toml, entries.map((e) => e.key));
+    const blocks = entries
+        .map((e) => `${headerFor(e.key)}\ntrusted_hash = "${e.hash}"\n`)
+        .join("\n");
+    const base = cleaned.trimEnd();
+    return base.length === 0 ? blocks : `${base}\n\n${blocks}`;
+};
+export { removeTrustBlocks, upsertTrustBlocks };
+//# sourceMappingURL=codex-trust-toml.js.map

package/dist/_utils/codex-trust-toml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-trust-toml.js","sourceRoot":"","sources":["../../src/_utils/codex-trust-toml.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,2EAA2E;AAC3E,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAI3E,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CACxC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAElD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,iBAAiB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;AAE/E,qEAAqE;AACrE,2EAA2E;AAC3E,qEAAqE;AACrE,iCAAiC;AACjC,MAAM,SAAS,GACb,iFAAiF,CAAC;AAEpF,MAAM,WAAW,GAAG,CAAC,GAAW,EAAU,EAAE,CAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAElD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAiB,EAAE;IAClD,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,IAAY,EAAW,EAAE,CAC9C,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAEnC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,IAAuB,EAAU,EAAE;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CACpC,CAAC,GAAyC,EAAE,IAAI,EAAE,EAAE;QAClD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,WAAW,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC,EACD,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAC7B,CAAC;IACF,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,IAAY,EACZ,OAA8B,EACtB,EAAE;IACV,MAAM,OAAO,GAAG,iBAAiB,CAC/B,IAAI,EACJ,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAC1B,CAAC;IACF,MAAM,MAAM,GAAG,OAAO;SACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,KAAK,CAAC;SAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/B,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,MAAM,EAAE,CAAC;AAC7D,CAAC,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/_utils/ensure-global-cli.d.ts

@@ -0,0 +1,28 @@
+type Outcome = {
+    readonly status: "present";
+} | {
+    readonly status: "installed";
+} | {
+    readonly status: "updated";
+} | {
+    readonly status: "no-npm";
+} | {
+    readonly status: "path-missing";
+    readonly binDir: string | null;
+} | {
+    readonly status: "failed";
+    readonly permission: boolean;
+    readonly hadExisting: boolean;
+};
+/**
+ * Make sure a current `glen` binary is reachable on PATH, installing or
+ * updating it globally via npm when it isn't. `npx @tryglen/cli install`
+ * runs this CLI from npx's cache without ever linking a global binary —
+ * without this step the plugins' hooks would have no `glen` to call and
+ * silently do nothing.
+ *
+ * `onInstallStart(hadExisting)` fires just before the (slow) npm install so
+ * the caller can print a progress line first.
+ */
+declare const ensureGlobalCli: (onInstallStart?: (hadExisting: boolean) => void) => Outcome;
+export { ensureGlobalCli };

package/dist/_utils/ensure-global-cli.js

@@ -0,0 +1,83 @@
+import { execFileSync } from "node:child_process";
+import { join } from "node:path";
+import { newer } from "./update.js";
+import { cliVersion } from "./version.js";
+import { isInstalled } from "./which.js";
+/** Version of the `glen` already on PATH, or null when absent/unreadable. */
+const installedVersion = () => {
+    try {
+        const out = execFileSync("glen", ["--version"], {
+            encoding: "utf8",
+            timeout: 10_000,
+        });
+        return /(\d+\.\d+\.\d+)/.exec(out)?.[1] ?? null;
+    }
+    catch {
+        return null;
+    }
+};
+/** npm's global bin dir (`<prefix>/bin`) for PATH guidance, null when unknown. */
+const npmGlobalBinDir = () => {
+    try {
+        const prefix = execFileSync("npm", ["prefix", "-g"], {
+            encoding: "utf8",
+            timeout: 10_000,
+        }).trim();
+        return prefix ? join(prefix, "bin") : null;
+    }
+    catch {
+        return null;
+    }
+};
+const installGlobally = () => {
+    try {
+        execFileSync("npm", ["install", "-g", "@tryglen/cli@latest"], {
+            stdio: ["ignore", "ignore", "pipe"],
+            encoding: "utf8",
+            timeout: 300_000,
+        });
+        return { ok: true, permission: false };
+    }
+    catch (error) {
+        const stderr = error && typeof error === "object" && "stderr" in error
+            ? String(error.stderr ?? "")
+            : "";
+        return { ok: false, permission: /EACCES|permission denied/i.test(stderr) };
+    }
+};
+/**
+ * Make sure a current `glen` binary is reachable on PATH, installing or
+ * updating it globally via npm when it isn't. `npx @tryglen/cli install`
+ * runs this CLI from npx's cache without ever linking a global binary —
+ * without this step the plugins' hooks would have no `glen` to call and
+ * silently do nothing.
+ *
+ * `onInstallStart(hadExisting)` fires just before the (slow) npm install so
+ * the caller can print a progress line first.
+ */
+const ensureGlobalCli = (onInstallStart) => {
+    const hadExisting = isInstalled("glen");
+    if (hadExisting) {
+        const version = installedVersion();
+        // Up to date (or ahead, e.g. a dev build) — nothing to do. A stale or
+        // unreadable version falls through to a reinstall.
+        if (version && !newer(cliVersion, version))
+            return { status: "present" };
+    }
+    if (!isInstalled("npm"))
+        return { status: "no-npm" };
+    onInstallStart?.(hadExisting);
+    const result = installGlobally();
+    if (!result.ok) {
+        return { status: "failed", permission: result.permission, hadExisting };
+    }
+    if (hadExisting)
+        return { status: "updated" };
+    if (isInstalled("glen"))
+        return { status: "installed" };
+    // npm succeeded but `glen` still doesn't resolve: the global bin dir is
+    // not on PATH (common with version managers / fresh Homebrew node).
+    return { status: "path-missing", binDir: npmGlobalBinDir() };
+};
+export { ensureGlobalCli };
+//# sourceMappingURL=ensure-global-cli.js.map

package/dist/_utils/ensure-global-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-global-cli.js","sourceRoot":"","sources":["../../src/_utils/ensure-global-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAiBzC,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,GAAkB,EAAE;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;YAC9C,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,kFAAkF;AAClF,MAAM,eAAe,GAAG,GAAkB,EAAE;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE;YACnD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,GAAyC,EAAE;IACjE,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,qBAAqB,CAAC,EAAE;YAC5D,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;YACnC,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK;YACrD,CAAC,CAAC,MAAM,CAAE,KAA8B,CAAC,MAAM,IAAI,EAAE,CAAC;YACtD,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7E,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,eAAe,GAAG,CACtB,cAA+C,EACtC,EAAE;IACX,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,sEAAsE;QACtE,mDAAmD;QACnD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACrD,cAAc,EAAE,CAAC,WAAW,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC9C,IAAI,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACxD,wEAAwE;IACxE,oEAAoE;IACpE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;AAC/D,CAAC,CAAC;AAEF,OAAO,EAAE,eAAe,EAAE,CAAC"}