@weave_protocol/adapter-codex 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,69 @@
-# Temporary Holding Version
+# 🛡️ @weave_protocol/adapter-codex
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+> Enforce [WARD.md](https://github.com/Tyox-all/Weave_Protocol/tree/main/ward) in **OpenAI Codex CLI** with its `PreToolUse` hook. Every shell command, file edit and MCP call is checked against your policy before it runs.
+
+[![npm](https://img.shields.io/npm/v/@weave_protocol/adapter-codex?color=000&style=flat-square)](https://www.npmjs.com/package/@weave_protocol/adapter-codex)
+
+The same WARD.md you use with Claude Code, Antigravity, Microsoft Agent Framework and Gemini CLI.
+
+## Quick start
+
+```bash
+npm i -g @weave_protocol/adapter-codex
+weave-ward-codex init        # adds the hook to ~/.codex/hooks.json
+```
+
+Then, in Codex, run **`/hooks`** and trust **"Weave: checking WARD.md"**. Codex skips new or changed hooks until you trust them. Add a `WARD.md` to your project (`npx @weave_protocol/ward init`), or a user-wide one at `~/.codex/WARD.md`.
+
+The command is `weave-ward-codex`, not `weave-codex`. The `weave-codex` npm name belongs to W&B Weave's Codex integration, which is a different product.
+
+## What it checks
+
+The hook uses Ward's shared evaluator (`evaluateToolCall`), so the rules match the other adapters exactly:
+
+- **Shell commands** (`Bash`, including unified exec): the `shell_exec` capability, plus every URL and every absolute or `~` path in the command.
+- **File edits** (`apply_patch`): the files the patch touches, read from its `*** Add File`, `*** Update File`, `*** Move to` and `*** Delete File` lines. Adds, updates and moves are writes; deletes are deletes. Text inside the patch is never treated as a target.
+- **MCP tools** (`mcp__<server>__<tool>`): by name, plus their path and URL arguments.
+- **`update_plan`** uses the `task_planning` capability, the same one the Gemini CLI adapter uses for planning tools.
+
+Codex's hosted tools, such as web search, don't go through `PreToolUse`. Neither do some specialized paths, as Codex's docs note. Treat the hook as a guardrail, and combine it with Codex's own sandbox and approval settings.
+
+## Decisions
+
+| WARD decision | What Codex sees |
+|---|---|
+| allow | nothing: the call continues, and Codex's own approvals still apply |
+| deny | `permissionDecision: "deny"` with the WARD reason, which the model sees |
+| require_approval | a deny whose reason says approval is needed (Codex hooks don't support "ask") |
+
+**Failure modes:**
+- **An invalid WARD.md always denies**, so a typo can't silently switch enforcement off.
+- **No WARD.md anywhere means no enforcement.**
+- **Malformed payloads and evaluator errors** allow by default. `init --fail-closed` makes them deny.
+
+WARD.md is looked up in this order:
+1. `$WEAVE_WARD_PATH`
+2. `<project>/WARD.md`
+3. `<project>/.codex/WARD.md`
+4. `<project>/.weave/WARD.md`
+5. `$CODEX_HOME/WARD.md` (default `~/.codex/WARD.md`)
+
+## Commands
+
+```bash
+weave-ward-codex init [--matcher=REGEX] [--timeout=SECONDS] [--fail-closed]
+weave-ward-codex disable
+weave-ward-codex status
+weave-ward-codex test Bash --input='{"command":"cat secrets/key"}'   # dry run
+weave-ward-codex hook pre-tool-use                                    # what Codex runs
+```
+
+`init` writes to `$CODEX_HOME/hooks.json` (default `~/.codex/hooks.json`). It backs the file up, edits it atomically, and finds its own entry by its status message, so your other hooks are untouched.
+
+## Verified
+
+Built against Codex's [hooks documentation](https://developers.openai.com/codex/hooks): the `PreToolUse` payload, deny output, `apply_patch` and MCP tool naming. 12 fixture tests.
+
+## License
+
+Apache-2.0

package/dist/cli.d.ts

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+/**
+ * weave-ward-codex CLI
+ *
+ *   weave-ward-codex init [--matcher=REGEX] [--timeout=SECONDS] [--fail-closed]   Install the WARD hook
+ *   weave-ward-codex disable                                                      Remove it
+ *   weave-ward-codex status                                                       Hook + active WARD.md
+ *   weave-ward-codex test <tool> [--input=JSON]                                   Dry-run a tool call
+ *   weave-ward-codex hook pre-tool-use [--fail-closed]                            Hook handler (run by Codex)
+ *
+ * (Not "weave-codex": that npm name belongs to W&B Weave's Codex integration.)
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG"}

package/dist/cli.js

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+/**
+ * weave-ward-codex CLI
+ *
+ *   weave-ward-codex init [--matcher=REGEX] [--timeout=SECONDS] [--fail-closed]   Install the WARD hook
+ *   weave-ward-codex disable                                                      Remove it
+ *   weave-ward-codex status                                                       Hook + active WARD.md
+ *   weave-ward-codex test <tool> [--input=JSON]                                   Dry-run a tool call
+ *   weave-ward-codex hook pre-tool-use [--fail-closed]                            Hook handler (run by Codex)
+ *
+ * (Not "weave-codex": that npm name belongs to W&B Weave's Codex integration.)
+ */
+import { installHook, removeHook, isHookInstalled, readHooks, hooksJsonPath, userWardPath } from './config.js';
+import { resolveWardForCwd, evaluateCall, runPreToolUseHook } from './hook.js';
+const tty = process.stderr.isTTY && !process.env.NO_COLOR;
+const c = {
+    reset: tty ? '\x1b[0m' : '', bold: tty ? '\x1b[1m' : '', red: tty ? '\x1b[31m' : '',
+    green: tty ? '\x1b[32m' : '', yellow: tty ? '\x1b[33m' : '', cyan: tty ? '\x1b[36m' : '', gray: tty ? '\x1b[90m' : '',
+};
+const say = (s = '') => console.error(s);
+const flag = (args, name) => args.includes(`--${name}`);
+const option = (args, name) => args.find((a) => a.startsWith(`--${name}=`))?.slice(name.length + 3);
+function help() {
+    say(`\n${c.cyan}${c.bold}🛡️  weave-ward-codex${c.reset} ${c.gray}WARD.md enforcement for OpenAI Codex CLI${c.reset}\n`);
+    say(`${c.bold}Commands:${c.reset}`);
+    say(`  ${c.cyan}init${c.reset} ${c.gray}[--matcher=REGEX] [--timeout=SECONDS] [--fail-closed]${c.reset}  Install the PreToolUse hook in ~/.codex/hooks.json`);
+    say(`  ${c.cyan}disable${c.reset}                                              Remove the hook`);
+    say(`  ${c.cyan}status${c.reset}                                               Show the hook and the active WARD.md`);
+    say(`  ${c.cyan}test${c.reset} ${c.gray}<tool> [--input=JSON]${c.reset}                           Dry-run a tool call against WARD.md`);
+    say(`  ${c.cyan}hook pre-tool-use${c.reset} ${c.gray}[--fail-closed]${c.reset}                   Hook handler (Codex runs this)\n`);
+    return 0;
+}
+function init(args) {
+    const timeout = option(args, 'timeout');
+    installHook({
+        matcher: option(args, 'matcher'),
+        timeoutSeconds: timeout ? Number(timeout) : undefined,
+        failClosed: flag(args, 'fail-closed'),
+    });
+    say(`${c.green}✓${c.reset} WARD hook installed in ${hooksJsonPath()}`);
+    say(`${c.yellow}!${c.reset} Codex skips new hooks until you trust them: run ${c.bold}/hooks${c.reset} in Codex and trust "${'Weave: checking WARD.md'}".`);
+    const ward = safeResolve(process.cwd());
+    if (!ward) {
+        say(`${c.yellow}!${c.reset} No WARD.md found here or at ${userWardPath()}; calls are allowed until you add one.`);
+    }
+    return 0;
+}
+function disable() {
+    const { removed } = removeHook();
+    say(removed ? `${c.green}✓${c.reset} Removed the WARD hook from ${hooksJsonPath()}` : 'No WARD hook was installed.');
+    return 0;
+}
+function safeResolve(cwd) {
+    try {
+        return resolveWardForCwd(cwd);
+    }
+    catch (err) {
+        say(`${c.red}✗${c.reset} ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+function status() {
+    const installed = isHookInstalled(readHooks());
+    say(`Hook:     ${installed ? `${c.green}installed${c.reset}` : `${c.yellow}not installed${c.reset}`} (${hooksJsonPath()})`);
+    const ward = safeResolve(process.cwd());
+    say(`WARD.md:  ${ward ? ward.source : `${c.yellow}none found${c.reset}`}`);
+    return installed && ward ? 0 : 1;
+}
+function test(args) {
+    const tool = args.find((a) => !a.startsWith('--'));
+    if (!tool) {
+        say('Usage: weave-ward-codex test <tool> [--input=JSON]');
+        return 2;
+    }
+    const ward = safeResolve(process.cwd());
+    if (!ward) {
+        say('No WARD.md found; nothing to test against.');
+        return 2;
+    }
+    const input = JSON.parse(option(args, 'input') ?? '{}');
+    const result = evaluateCall(ward.policy, tool, input, process.cwd());
+    const color = result.decision === 'allow' ? c.green : result.decision === 'deny' ? c.red : c.yellow;
+    say(`${color}${result.decision}${c.reset} ${tool}`);
+    for (const r of result.reasons)
+        say(`  ${c.gray}${r}${c.reset}`);
+    return result.decision === 'allow' ? 0 : 1;
+}
+async function main() {
+    const [cmd, ...rest] = process.argv.slice(2);
+    switch (cmd) {
+        case 'init': return init(rest);
+        case 'disable':
+        case 'uninstall': return disable();
+        case 'status': return status();
+        case 'test': return test(rest);
+        case 'hook':
+            if (rest[0] === 'pre-tool-use' || !rest[0])
+                return runPreToolUseHook(flag(rest, 'fail-closed'));
+            // Other events: print nothing, so the call continues
+            return 0;
+        default: return help();
+    }
+}
+main().then((code) => process.exit(code), (err) => {
+    say(`weave-ward-codex: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/G,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE/E,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC1D,MAAM,CAAC,GAAG;IACR,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;IACnF,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;CACtH,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEzC,MAAM,IAAI,GAAG,CAAC,IAAc,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC1E,MAAM,MAAM,GAAG,CAAC,IAAc,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAEtH,SAAS,IAAI;IACX,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,wBAAwB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,2CAA2C,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACzH,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,wDAAwD,CAAC,CAAC,KAAK,sDAAsD,CAAC,CAAC;IAC9J,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,+DAA+D,CAAC,CAAC;IACjG,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAAK,qFAAqF,CAAC,CAAC;IACtH,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,wBAAwB,CAAC,CAAC,KAAK,gEAAgE,CAAC,CAAC;IACxI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,oBAAoB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,qDAAqD,CAAC,CAAC;IACpI,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,IAAI,CAAC,IAAc;IAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,WAAW,CAAC;QACV,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;QAChC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QACrD,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;KACtC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,2BAA2B,aAAa,EAAE,EAAE,CAAC,CAAC;IACvE,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,oDAAoD,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAAK,wBAAwB,yBAAyB,IAAI,CAAC,CAAC;IAC3J,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,gCAAgC,YAAY,EAAE,wCAAwC,CAAC,CAAC;IACpH,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO;IACd,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;IACjC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,+BAA+B,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACrH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,MAAM;IACb,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/C,GAAG,CAAC,aAAa,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,KAAK,EAAE,KAAK,aAAa,EAAE,GAAG,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,IAAI,CAAC,IAAc;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACpG,GAAG,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;QAAE,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,EAAE,OAAO,OAAO,EAAE,CAAC;QACnC,KAAK,QAAQ,EAAE,OAAO,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM;YACT,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;YAChG,qDAAqD;YACrD,OAAO,CAAC,CAAC;QACX,SAAS,OAAO,IAAI,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;IAChD,GAAG,CAAC,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Manage $CODEX_HOME/hooks.json (default ~/.codex/hooks.json) — install,
+ * remove, inspect the WARD hook.
+ *
+ * Safety rules:
+ *  - Back up hooks.json before changing it, and write atomically
+ *  - Idempotent: init twice leaves one entry
+ *  - Our entry is found by its statusMessage; other hooks are untouched
+ *
+ * Codex skips new or changed hooks until they are trusted: after init, run
+ * /hooks in Codex and trust the Weave hook.
+ */
+import type { CodexHookGroup } from './types.js';
+export declare const STATUS_MESSAGE = "Weave: checking WARD.md";
+export declare function codexHome(): string;
+export declare function hooksJsonPath(): string;
+/** User-global WARD.md, used when a project has none. */
+export declare function userWardPath(): string;
+export interface HooksFile {
+    description?: string;
+    hooks?: {
+        PreToolUse?: CodexHookGroup[];
+        [event: string]: CodexHookGroup[] | undefined;
+    };
+    [other: string]: unknown;
+}
+export declare function readHooks(path?: string): HooksFile;
+export declare function writeHooks(file: HooksFile, path?: string): void;
+export interface InstallOptions {
+    /** Command that runs this CLI. Default: "weave-ward-codex" */
+    binary?: string;
+    /** Regex of tool names to gate. Default: every tool */
+    matcher?: string;
+    /** Hook timeout in seconds (Codex's unit). Default 10 */
+    timeoutSeconds?: number;
+    /** Deny on malformed payloads and evaluator errors. Default: allow */
+    failClosed?: boolean;
+}
+export declare function isHookInstalled(file?: HooksFile): boolean;
+export declare function installHook(opts?: InstallOptions): HooksFile;
+export declare function removeHook(): {
+    removed: number;
+    file: HooksFile;
+};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,eAAO,MAAM,cAAc,4BAA4B,CAAC;AAExD,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,yDAAyD;AACzD,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,MAAM,WAAW,SAAS;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE;QACN,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;QAC9B,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,EAAE,GAAG,SAAS,CAAC;KAC/C,CAAC;IACF,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,wBAAgB,SAAS,CAAC,IAAI,SAAkB,GAAG,SAAS,CAS3D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,SAAkB,GAAG,IAAI,CAMxE;AAED,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAID,wBAAgB,eAAe,CAAC,IAAI,GAAE,SAAuB,GAAG,OAAO,CAEtE;AAED,wBAAgB,WAAW,CAAC,IAAI,GAAE,cAAmB,GAAG,SAAS,CAWhE;AAED,wBAAgB,UAAU,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAWjE"}

package/dist/config.js

@@ -0,0 +1,75 @@
+/**
+ * Manage $CODEX_HOME/hooks.json (default ~/.codex/hooks.json) — install,
+ * remove, inspect the WARD hook.
+ *
+ * Safety rules:
+ *  - Back up hooks.json before changing it, and write atomically
+ *  - Idempotent: init twice leaves one entry
+ *  - Our entry is found by its statusMessage; other hooks are untouched
+ *
+ * Codex skips new or changed hooks until they are trusted: after init, run
+ * /hooks in Codex and trust the Weave hook.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync, copyFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { homedir } from 'node:os';
+export const STATUS_MESSAGE = 'Weave: checking WARD.md';
+export function codexHome() {
+    return process.env.CODEX_HOME ? resolve(process.env.CODEX_HOME) : join(homedir(), '.codex');
+}
+export function hooksJsonPath() {
+    return join(codexHome(), 'hooks.json');
+}
+/** User-global WARD.md, used when a project has none. */
+export function userWardPath() {
+    return join(codexHome(), 'WARD.md');
+}
+export function readHooks(path = hooksJsonPath()) {
+    if (!existsSync(path))
+        return {};
+    try {
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch (err) {
+        throw new Error(`Failed to parse ${path}; fix the JSON or move it aside and re-run. ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+export function writeHooks(file, path = hooksJsonPath()) {
+    mkdirSync(dirname(path), { recursive: true });
+    if (existsSync(path))
+        copyFileSync(path, `${path}.weave-backup`);
+    const tmp = `${path}.tmp`;
+    writeFileSync(tmp, JSON.stringify(file, null, 2) + '\n', 'utf8');
+    renameSync(tmp, path);
+}
+const ours = (g) => g.hooks?.some((h) => h.statusMessage === STATUS_MESSAGE);
+export function isHookInstalled(file = readHooks()) {
+    return (file.hooks?.PreToolUse ?? []).some(ours);
+}
+export function installHook(opts = {}) {
+    const file = readHooks();
+    const command = `${opts.binary ?? 'weave-ward-codex'} hook pre-tool-use${opts.failClosed ? ' --fail-closed' : ''}`;
+    const group = {
+        matcher: opts.matcher ?? '*',
+        hooks: [{ type: 'command', command, timeout: opts.timeoutSeconds ?? 10, statusMessage: STATUS_MESSAGE }],
+    };
+    const hooks = (file.hooks ??= {});
+    hooks.PreToolUse = [...(hooks.PreToolUse ?? []).filter((g) => !ours(g)), group];
+    writeHooks(file);
+    return file;
+}
+export function removeHook() {
+    const file = readHooks();
+    const before = file.hooks?.PreToolUse ?? [];
+    const after = before.filter((g) => !ours(g));
+    const removed = before.length - after.length;
+    if (removed > 0 && file.hooks) {
+        if (after.length)
+            file.hooks.PreToolUse = after;
+        else
+            delete file.hooks.PreToolUse;
+        writeHooks(file);
+    }
+    return { removed, file };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,MAAM,CAAC,MAAM,cAAc,GAAG,yBAAyB,CAAC;AAExD,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;AACzC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAWD,MAAM,UAAU,SAAS,CAAC,IAAI,GAAG,aAAa,EAAE;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAc,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAe,EAAE,IAAI,GAAG,aAAa,EAAE;IAChE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,eAAe,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACjE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAaD,MAAM,IAAI,GAAG,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,cAAc,CAAC,CAAC;AAE7F,MAAM,UAAU,eAAe,CAAC,IAAI,GAAc,SAAS,EAAE;IAC3D,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAI,GAAmB,EAAE;IACnD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,kBAAkB,qBAAqB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnH,MAAM,KAAK,GAAmB;QAC5B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,GAAG;QAC5B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;KACzG,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAClC,KAAK,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChF,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM;YAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;;YAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/hook.d.ts

@@ -0,0 +1,35 @@
+/**
+ * PreToolUse hook handler: reads Codex's payload from stdin, finds the
+ * active WARD.md, decides with Ward's shared evaluator, and prints a deny or
+ * nothing.
+ *
+ * WARD.md resolution (cwd = the payload's cwd):
+ *   1. $WEAVE_WARD_PATH
+ *   2. <cwd>/WARD.md
+ *   3. <cwd>/.codex/WARD.md
+ *   4. <cwd>/.weave/WARD.md
+ *   5. $CODEX_HOME/WARD.md (default ~/.codex/WARD.md)
+ *
+ * Failure modes:
+ *   - A WARD.md that exists but is invalid always denies: a typo must not
+ *     silently switch enforcement off.
+ *   - Malformed payloads and evaluator errors allow by default (with a note
+ *     on stderr); --fail-closed denies instead.
+ */
+import { type WardPolicy } from '@weave_protocol/ward';
+import { type CodexHookOutput } from './types.js';
+export interface ResolvedWard {
+    policy: WardPolicy;
+    source: string;
+}
+export interface HookDecision {
+    decision: 'allow' | 'deny' | 'require_approval';
+    reasons: string[];
+}
+export declare function resolveWardForCwd(cwd: string): ResolvedWard | null;
+/** Decide a Codex tool call against a WARD policy. */
+export declare function evaluateCall(policy: WardPolicy, toolName: string, toolInput: unknown, cwd?: string): HookDecision;
+/** WARD decision → Codex output; undefined means print nothing (continue). */
+export declare function toHookOutput(result: HookDecision, source: string): CodexHookOutput | undefined;
+export declare function runPreToolUseHook(failClosed: boolean): Promise<never>;
+//# sourceMappingURL=hook.d.ts.map

package/dist/hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../src/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAsC,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAsC,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAItF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAmBlE;AAID,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,GAAE,MAAsB,GAAG,YAAY,CA0BhI;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAM9F;AAmBD,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAoC3E"}

package/dist/hook.js

@@ -0,0 +1,137 @@
+/**
+ * PreToolUse hook handler: reads Codex's payload from stdin, finds the
+ * active WARD.md, decides with Ward's shared evaluator, and prints a deny or
+ * nothing.
+ *
+ * WARD.md resolution (cwd = the payload's cwd):
+ *   1. $WEAVE_WARD_PATH
+ *   2. <cwd>/WARD.md
+ *   3. <cwd>/.codex/WARD.md
+ *   4. <cwd>/.weave/WARD.md
+ *   5. $CODEX_HOME/WARD.md (default ~/.codex/WARD.md)
+ *
+ * Failure modes:
+ *   - A WARD.md that exists but is invalid always denies: a typo must not
+ *     silently switch enforcement off.
+ *   - Malformed payloads and evaluator errors allow by default (with a note
+ *     on stderr); --fail-closed denies instead.
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { parseAndValidate, evaluateToolCall } from '@weave_protocol/ward';
+import { TOOL_MAPPINGS } from './types.js';
+import { patchTargets } from './patch.js';
+import { userWardPath } from './config.js';
+export function resolveWardForCwd(cwd) {
+    const candidates = [
+        process.env.WEAVE_WARD_PATH,
+        cwd && join(cwd, 'WARD.md'),
+        cwd && join(cwd, '.codex', 'WARD.md'),
+        cwd && join(cwd, '.weave', 'WARD.md'),
+        userWardPath(),
+    ].filter((p) => !!p);
+    for (const path of candidates) {
+        const full = resolve(path);
+        if (!existsSync(full))
+            continue;
+        const result = parseAndValidate(readFileSync(full, 'utf8'));
+        if (!result.valid || !result.policy) {
+            throw new Error(`Invalid WARD.md at ${full}: ${result.errors.map((e) => e.message).join('; ')}`);
+        }
+        return { policy: result.policy, source: full };
+    }
+    return null;
+}
+const RANK = { allow: 0, require_approval: 1, deny: 2 };
+/** Decide a Codex tool call against a WARD policy. */
+export function evaluateCall(policy, toolName, toolInput, cwd = process.cwd()) {
+    const input = toolInput && typeof toolInput === 'object' && !Array.isArray(toolInput)
+        ? toolInput
+        : { command: toolInput };
+    const opts = { mappings: TOOL_MAPPINGS, cwd };
+    // apply_patch: the files the patch writes and deletes, not its text
+    if (toolName === 'apply_patch') {
+        const { writes, deletes } = patchTargets(String(input.command ?? ''));
+        const results = [
+            evaluateToolCall(policy, 'apply_patch', { target: writes }, {
+                ...opts, mappings: { apply_patch: { capability: 'file_write', pathField: 'target', fsOp: 'write' } },
+            }),
+            ...(deletes.length
+                ? [evaluateToolCall(policy, 'apply_patch', { target: deletes }, {
+                        ...opts, mappings: { apply_patch: { capability: 'file_write', pathField: 'target', fsOp: 'delete' } },
+                    })]
+                : []),
+        ];
+        const worst = results.reduce((a, b) => (RANK[b.decision] > RANK[a.decision] ? b : a));
+        return { decision: worst.decision, reasons: results.flatMap((r) => r.reasons) };
+    }
+    const { decision, reasons } = evaluateToolCall(policy, toolName, input, opts);
+    return { decision, reasons };
+}
+/** WARD decision → Codex output; undefined means print nothing (continue). */
+export function toHookOutput(result, source) {
+    if (result.decision === 'allow')
+        return undefined;
+    const reason = result.decision === 'deny'
+        ? `WARD: ${result.reasons.join(' | ')} (policy: ${source})`
+        : `WARD requires approval before this call: ${result.reasons.join(' | ')} (policy: ${source}). Ask the user to approve it or update WARD.md.`;
+    return { hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: reason } };
+}
+async function readStdin() {
+    if (process.stdin.isTTY)
+        return '';
+    let data = '';
+    process.stdin.setEncoding('utf8');
+    for await (const chunk of process.stdin)
+        data += chunk;
+    return data;
+}
+function emit(output) {
+    if (output)
+        process.stdout.write(JSON.stringify(output));
+    process.exit(0);
+}
+const denyWith = (reason) => ({
+    hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: reason },
+});
+export async function runPreToolUseHook(failClosed) {
+    const raw = await readStdin();
+    if (!raw.trim())
+        emit();
+    let payload;
+    try {
+        payload = JSON.parse(raw);
+    }
+    catch {
+        if (failClosed)
+            emit(denyWith('WARD hook: malformed payload from Codex'));
+        process.stderr.write('weave-ward-codex: malformed hook payload, allowing\n');
+        emit();
+    }
+    if (!payload.tool_name)
+        emit();
+    const cwd = payload.cwd || process.cwd();
+    let resolved;
+    try {
+        resolved = resolveWardForCwd(cwd);
+    }
+    catch (err) {
+        // A policy exists but can't be used: deny rather than run unprotected.
+        emit(denyWith(`WARD policy could not be loaded: ${err instanceof Error ? err.message : String(err)}. Fix WARD.md to continue.`));
+    }
+    if (!resolved)
+        emit();
+    let result;
+    try {
+        result = evaluateCall(resolved.policy, payload.tool_name, payload.tool_input, cwd);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (failClosed)
+            emit(denyWith(`WARD evaluation failed: ${msg}`));
+        process.stderr.write(`weave-ward-codex: WARD evaluation failed (${msg}), allowing\n`);
+        emit();
+    }
+    emit(toHookOutput(result, resolved.source));
+}
+//# sourceMappingURL=hook.js.map

package/dist/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../src/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAmB,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,aAAa,EAA6C,MAAM,YAAY,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAY3C,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,UAAU,GAAG;QACjB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC;QAC3B,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC;QACrC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC;QACrC,YAAY,EAAE;KACf,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAW,CAAC;AAEjE,sDAAsD;AACtD,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,QAAgB,EAAE,SAAkB,EAAE,GAAG,GAAW,OAAO,CAAC,GAAG,EAAE;IAChH,MAAM,KAAK,GACT,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACrE,CAAC,CAAE,SAAqC;QACxC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;IAE9C,oEAAoE;IACpE,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG;YACd,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBAC1D,GAAG,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;aACrG,CAAC;YACF,GAAG,CAAC,OAAO,CAAC,MAAM;gBAChB,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;wBAC9D,GAAG,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACtG,CAAC,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,MAAc;IAC/D,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM;QACvC,CAAC,CAAC,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,MAAM,GAAG;QAC3D,CAAC,CAAC,4CAA4C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,MAAM,kDAAkD,CAAC;IAChJ,OAAO,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,EAAE,CAAC;AAC/H,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,IAAI,IAAI,KAAK,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI,CAAC,MAAwB;IACpC,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAmB,EAAE,CAAC,CAAC;IACrD,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE;CAClH,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAmB;IACzD,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,CAAC;IAExB,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU;YAAE,IAAI,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC7E,IAAI,EAAE,CAAC;IACT,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,IAAI,EAAE,CAAC;IAE/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzC,IAAI,QAA6B,CAAC;IAClC,IAAI,CAAC;QACH,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,IAAI,CAAC,QAAQ,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,IAAI,EAAE,CAAC;IAEtB,IAAI,MAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,UAAU;YAAE,IAAI,CAAC,QAAQ,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,GAAG,eAAe,CAAC,CAAC;QACtF,IAAI,EAAE,CAAC;IACT,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @weave_protocol/adapter-codex — WARD.md enforcement for OpenAI Codex CLI.
+ */
+export * from './types.js';
+export { patchTargets } from './patch.js';
+export type { PatchTargets } from './patch.js';
+export { STATUS_MESSAGE, codexHome, hooksJsonPath, userWardPath, readHooks, writeHooks, installHook, removeHook, isHookInstalled, } from './config.js';
+export type { HooksFile, InstallOptions } from './config.js';
+export { resolveWardForCwd, evaluateCall, toHookOutput } from './hook.js';
+export type { ResolvedWard, HookDecision } from './hook.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,SAAS,EACT,aAAa,EACb,YAAY,EACZ,SAAS,EACT,UAAU,EACV,WAAW,EACX,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC1E,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+/**
+ * @weave_protocol/adapter-codex — WARD.md enforcement for OpenAI Codex CLI.
+ */
+export * from './types.js';
+export { patchTargets } from './patch.js';
+export { STATUS_MESSAGE, codexHome, hooksJsonPath, userWardPath, readHooks, writeHooks, installHook, removeHook, isHookInstalled, } from './config.js';
+export { resolveWardForCwd, evaluateCall, toHookOutput } from './hook.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EACL,cAAc,EACd,SAAS,EACT,aAAa,EACb,YAAY,EACZ,SAAS,EACT,UAAU,EACV,WAAW,EACX,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/patch.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The files a Codex apply_patch touches. The patch format marks each file:
+ *
+ *   *** Add File: <path>       new file      → write
+ *   *** Update File: <path>    edit in place → write
+ *   *** Move to: <path>        rename target → write
+ *   *** Delete File: <path>    removal       → delete
+ *
+ * Paths are relative to the session cwd unless absolute.
+ */
+export interface PatchTargets {
+    writes: string[];
+    deletes: string[];
+}
+export declare function patchTargets(patch: string): PatchTargets;
+//# sourceMappingURL=patch.d.ts.map

package/dist/patch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.d.ts","sourceRoot":"","sources":["../src/patch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAID,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,CASxD"}

package/dist/patch.js

@@ -0,0 +1,23 @@
+/**
+ * The files a Codex apply_patch touches. The patch format marks each file:
+ *
+ *   *** Add File: <path>       new file      → write
+ *   *** Update File: <path>    edit in place → write
+ *   *** Move to: <path>        rename target → write
+ *   *** Delete File: <path>    removal       → delete
+ *
+ * Paths are relative to the session cwd unless absolute.
+ */
+const MARKER = /^\*\*\* (Add File|Update File|Move to|Delete File):\s*(.+?)\s*$/;
+export function patchTargets(patch) {
+    const writes = [];
+    const deletes = [];
+    for (const line of patch.split(/\r?\n/)) {
+        const m = MARKER.exec(line);
+        if (!m)
+            continue;
+        (m[1] === 'Delete File' ? deletes : writes).push(m[2]);
+    }
+    return { writes, deletes };
+}
+//# sourceMappingURL=patch.js.map

package/dist/patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.js","sourceRoot":"","sources":["../src/patch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,MAAM,MAAM,GAAG,iEAAiE,CAAC;AAEjF,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Codex CLI hook contract (https://developers.openai.com/codex/hooks):
+ *
+ *   stdin  { session_id, transcript_path, cwd, hook_event_name, model,
+ *            turn_id, tool_name, tool_use_id, tool_input, permission_mode }
+ *   stdout { hookSpecificOutput: { hookEventName: "PreToolUse",
+ *            permissionDecision: "deny", permissionDecisionReason } }
+ *          or nothing (the call continues)
+ *
+ * Shell commands (including unified exec) arrive as tool_name "Bash" with
+ * tool_input.command; file edits as "apply_patch" with the patch text in
+ * tool_input.command; MCP tools as mcp__<server>__<tool>. "ask" is not
+ * supported, so a WARD require_approval is a deny whose reason says so.
+ * Hosted tools (web search) never reach PreToolUse.
+ */
+import type { ToolMapping } from '@weave_protocol/ward';
+export interface CodexHookInput {
+    session_id?: string;
+    transcript_path?: string | null;
+    cwd?: string;
+    hook_event_name?: string;
+    model?: string;
+    turn_id?: string;
+    tool_name?: string;
+    tool_use_id?: string;
+    tool_input?: unknown;
+    permission_mode?: string;
+}
+export interface CodexHookOutput {
+    hookSpecificOutput?: {
+        hookEventName: 'PreToolUse';
+        permissionDecision: 'deny';
+        permissionDecisionReason: string;
+    };
+}
+/**
+ * Codex's local tools. apply_patch is decided from the files its patch
+ * touches (see patch.ts); unknown tools, including MCP tools, use their own
+ * name as the capability and Ward checks their path and URL arguments.
+ */
+export declare const TOOL_MAPPINGS: Record<string, ToolMapping>;
+/** One PreToolUse matcher group in hooks.json. */
+export interface CodexHookGroup {
+    matcher?: string;
+    hooks: Array<{
+        type: 'command' | 'mcp_tool';
+        command?: string;
+        timeout?: number;
+        statusMessage?: string;
+        async?: boolean;
+    }>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,kBAAkB,CAAC,EAAE;QACnB,aAAa,EAAE,YAAY,CAAC;QAC5B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,wBAAwB,EAAE,MAAM,CAAC;KAClC,CAAC;CACH;AAED;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAMrD,CAAC;AAEF,kDAAkD;AAClD,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;QACX,IAAI,EAAE,SAAS,GAAG,UAAU,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC,CAAC;CACJ"}

package/dist/types.js

@@ -0,0 +1,28 @@
+/**
+ * Codex CLI hook contract (https://developers.openai.com/codex/hooks):
+ *
+ *   stdin  { session_id, transcript_path, cwd, hook_event_name, model,
+ *            turn_id, tool_name, tool_use_id, tool_input, permission_mode }
+ *   stdout { hookSpecificOutput: { hookEventName: "PreToolUse",
+ *            permissionDecision: "deny", permissionDecisionReason } }
+ *          or nothing (the call continues)
+ *
+ * Shell commands (including unified exec) arrive as tool_name "Bash" with
+ * tool_input.command; file edits as "apply_patch" with the patch text in
+ * tool_input.command; MCP tools as mcp__<server>__<tool>. "ask" is not
+ * supported, so a WARD require_approval is a deny whose reason says so.
+ * Hosted tools (web search) never reach PreToolUse.
+ */
+/**
+ * Codex's local tools. apply_patch is decided from the files its patch
+ * touches (see patch.ts); unknown tools, including MCP tools, use their own
+ * name as the capability and Ward checks their path and URL arguments.
+ */
+export const TOOL_MAPPINGS = {
+    Bash: { capability: 'shell_exec', commandField: 'command' },
+    apply_patch: { capability: 'file_write' },
+    view_image: { capability: 'file_read', pathField: 'path', fsOp: 'read' },
+    update_plan: { capability: 'task_planning' },
+    spawn_agent: { capability: 'subagent' },
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAyBH;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAgC;IACxD,IAAI,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE;IAC3D,WAAW,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;IACzC,UAAU,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;IACxE,WAAW,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE;IAC5C,WAAW,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;CACxC,CAAC"}

package/package.json

@@ -1,6 +1,55 @@
 {
   "name": "@weave_protocol/adapter-codex",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Weave Protocol adapter for OpenAI Codex CLI - enforces WARD.md policies via Codex's PreToolUse hook",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "weave-ward-codex": "dist/cli.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "npm run build && node --test test/*.test.mjs",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "weave-protocol",
+    "ward",
+    "codex",
+    "codex-cli",
+    "openai",
+    "agent-security",
+    "ai-security",
+    "hooks",
+    "harness-adapter",
+    "policy-enforcement",
+    "ward-md"
+  ],
+  "author": "Trent Yoxall",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Tyox-all/Weave_Protocol.git",
+    "directory": "adapter-codex"
+  },
+  "homepage": "https://github.com/Tyox-all/Weave_Protocol/tree/main/adapter-codex#readme",
+  "bugs": {
+    "url": "https://github.com/Tyox-all/Weave_Protocol/issues"
+  },
+  "dependencies": {
+    "@weave_protocol/ward": "^0.3.0"
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.6",
+    "typescript": "^7.0.2"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "dist/",
+    "README.md"
+  ]
+}