@zaip-ai/cli 1.3.8 → 1.4.2

package/README.md

@@ -4,6 +4,26 @@
 npx @zaip-ai/cli@latest init
 ```
 
+Installation profiles:
+
+```bash
+npx @zaip-ai/cli@latest init
+npx @zaip-ai/cli@latest init --profile dev-lite
+npx @zaip-ai/cli@latest init --profile lite
+npx --yes @zaip-ai/cli@latest init
+```
+
+There are exactly three profiles: `full` installs application development dependencies and Terraform
+and is the default for a new project; `dev-lite` installs development dependencies without
+Terraform; and `lite` is for Growth/Ops and skips application development dependencies and
+Terraform. The chosen profile is saved and reused by later `init` calls; selecting a smaller profile
+does not uninstall existing tools. Node/npm remains required even for `lite`.
+
+`npx --yes` appears before the package name and suppresses npx's initial package-download prompt. It
+can be combined with any profile, such as `npx --yes @zaip-ai/cli@latest init --profile lite`.
+`init --yes`, after the package name, is ZAIP's confirmation for `--force`. Review the dry-run
+before using `--force --yes`; the installer creates a backup before replacing files.
+
 Or use the npm initializer:
 
 ```bash
@@ -30,7 +50,7 @@ Windows/macOS/Linux matrix certification.
 ## Commands and flags
 
 ```text
-zaip init [directory] [--yes] [--force] [--dry-run] [--verbose] [--project-only]
+zaip init [directory] [--profile full|dev-lite|lite] [--yes] [--force] [--dry-run] [--verbose] [--project-only]
 zaip doctor [directory] [--json]
 zaip adapters build [directory] [--force]
 zaip adapters check [directory] [--json]
@@ -42,6 +62,9 @@ zaip --help
 - `--force` backs up the current `.agents` directory, then reinstalls the official template.
 - `--dry-run` prints the complete plan without writing files or backups.
 - `--verbose` lists technical paths and detected conflicts.
+- `--profile full|dev-lite|lite` selects the installation tools. A new project defaults to `full`;
+  later runs reuse the saved profile unless explicitly changed. Smaller profiles never uninstall
+  existing dependencies or tools.
 - `--project-only` installs and updates only repository-owned files; it never reads or writes
   `~/.codex`. Without it, initialization removes only deprecated Codex identity aliases declared
   by the current catalog and idempotently installs the portable ZAIP `PreToolUse` safety hook. It
@@ -55,12 +78,42 @@ may be refreshed safely; user-owned adapters are never overwritten without expli
 
 ## Updating
 
-`init` automatically installs missing TypeScript, Vite, Astro, Redis client, BullMQ, Hono,
+With `full` or `dev-lite`, `init` automatically installs missing TypeScript, Vite, Astro, Redis client, BullMQ, Hono,
 React and React DOM packages in the project. Defaults come from
 `.agents/dashboard/stack-dependencies.json`; exact versions in
 `project.yaml` → `stack.overrides.components` take precedence. No approval prompt is needed
 for dependency installation. A new project receives a private `package.json` and an npm lockfile.
 
+`full` additionally prepares the fixed Terraform 1.16.1 release; `dev-lite` does not install it. `lite` skips application
+development dependencies and Terraform while retaining ZAIP's runtime, agents, skills and Dashboard.
+It is intended for Growth/Ops projects. Node/npm remain necessary to execute the installer.
+
+```bash
+npx @zaip-ai/cli@latest init --profile lite
+npx @zaip-ai/cli@latest init --profile dev-lite
+npx @zaip-ai/cli@latest init --profile full
+npm create zaip-aios@latest -- --profile lite
+```
+
+Each command saves `stack.overrides.installation_profile` in `.agents/config/project.yaml` for subsequent updates. Use an explicit larger profile to
+add development or infrastructure tools later. An invalid profile is rejected before installation.
+`--dry-run` previews the selected profile without persisting it or downloading tools.
+
+Git is a system capability, not an npm dependency. On Windows, every profile resolves the latest
+official Git for Windows release, verifies its SHA-256 when published, and provisions it privately
+at `.local/git/cmd/git.exe` for ZAIP hooks. On macOS and Linux, `init` validates the system `git`
+command and reports an actionable prerequisite error when it is unavailable. The installer never
+changes the global Git installation or PATH.
+
+Terraform is a standalone executable. The full profile reuses a compatible installation or prepares
+the pinned official Terraform 1.16.1 release locally, verifying its SHA-256 checksum. Provider plugins
+are downloaded separately by `terraform init` for the project's `.tf` configuration. Cloud credentials
+remain a separate setup step; ZAIP installation never runs `terraform apply`.
+
+When Terraform is installed locally, npm scripts can find it in `node_modules/.bin`. You can also
+invoke it directly: `.\node_modules\.bin\terraform.exe version` in Windows PowerShell or
+`./node_modules/.bin/terraform version` on macOS/Linux. The installer does not modify the global PATH.
+
 An existing local package is preserved even when its version differs from ZAIP's configuration;
 the summary reports both versions. When a package is declared but not installed, the project's
 existing declaration wins. React DOM follows an existing React version when no DOM choice exists.
@@ -83,7 +136,9 @@ The Redis npm package is a client library: a Redis server or hosted endpoint rem
 an application infrastructure choice. SQLite is provided by Node and initialized automatically.
 
 `--dry-run` displays missing and preserved packages without downloading or changing anything.
-`doctor` validates framework files and adapters; the installer separately verifies stack packages.
+`doctor` validates framework files, adapters and Terraform availability for projects with a saved
+`full` profile; the installer separately verifies stack packages. Legacy projects without a saved
+profile do not gain a Terraform requirement from a read-only `doctor` call.
 
 Run the latest version again. New files are added while local changes remain untouched:
 

package/dist/commands/init.d.ts

@@ -5,6 +5,7 @@ export interface InitCommandOptions {
     dryRun?: boolean;
     verbose?: boolean;
     projectOnly?: boolean;
+    profile?: "full" | "dev-lite" | "lite";
 }
 export declare function executeInit(directory: string | undefined, command: InitCommandOptions, version: string, runtime?: CliRuntime): Promise<InitResult>;
 //# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAe,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,UAAe,GACvB,OAAO,CAAC,UAAU,CAAC,CAiDrB"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAe,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;CACxC;AAED,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,UAAe,GACvB,OAAO,CAAC,UAAU,CAAC,CAyDrB"}

package/dist/commands/init.js

@@ -2,11 +2,14 @@ import { resolve } from "node:path";
 import { createInterface } from "node:readline/promises";
 import { findProjectRoot } from "../services/find-project-root.js";
 import { installAgentsTemplate } from "../services/install-agents-template.js";
+import { persistInstallProfile, resolveInstallProfile } from "../services/install-profile.js";
 import { printResult } from "../services/logger.js";
 import { assertDashboardBootstrapPreflight, bootstrapDashboardSqlite, } from "../services/sqlite-bootstrap.js";
+import { prepareStackGit } from "../services/stack-git.js";
 import { installStack } from "../services/stack-install.js";
 import { exposeStackNode, prepareStackNode, usingStackNode } from "../services/stack-node.js";
 import { describeStack, planStack } from "../services/stack-plan.js";
+import { prepareStackTerraform } from "../services/stack-terraform.js";
 export async function executeInit(directory, command, version, runtime = {}) {
     const stdin = runtime.stdin ?? process.stdin;
     const stdout = runtime.stdout ?? process.stdout;
@@ -16,6 +19,7 @@ export async function executeInit(directory, command, version, runtime = {}) {
         force: command.force ?? false,
         dryRun: command.dryRun ?? false,
         verbose: command.verbose ?? false,
+        ...(command.profile === undefined ? {} : { profile: command.profile }),
         cliVersion: version,
         installGlobalCodexConfig: runtime.templateDirectory === undefined && !command.projectOnly,
         ...(directory === undefined ? {} : { directory }),
@@ -28,21 +32,28 @@ export async function executeInit(directory, command, version, runtime = {}) {
         options.confirmForce = confirmation(stdin, stdout);
     }
     const target = await findProjectRoot(resolve(options.cwd, directory ?? "."));
-    const stack = await planStack(target.root, runtime.templateDirectory);
+    const profile = await resolveInstallProfile(target.root, command.profile);
+    const stack = await planStack(target.root, runtime.templateDirectory, profile);
     if (!options.dryRun)
         await assertDashboardBootstrapPreflight();
     const result = await installAgentsTemplate(options);
     if (result.dryRun || result.applied)
         stdout.write(describeStack(stack, result.dryRun));
     if (result.applied && !result.dryRun) {
-        const node = await prepareStackNode(result.root, (message) => stdout.write(message));
-        const dependencies = await installStack(stack, usingStackNode(node, runtime.packageRunner));
-        await exposeStackNode(result.root, node);
-        for (const item of dependencies.packages.filter((item) => item.action === "installed")) {
-            stdout.write(`${item.name}: instalado ${item.installed}; configurado ZAIP ${item.configured}.\n`);
+        await prepareStackGit(result.root, (message) => stdout.write(message));
+        if (profile !== "lite") {
+            const node = await prepareStackNode(result.root, (message) => stdout.write(message));
+            const dependencies = await installStack(stack, usingStackNode(node, runtime.packageRunner));
+            await exposeStackNode(result.root, node);
+            for (const item of dependencies.packages.filter((item) => item.action === "installed")) {
+                stdout.write(`${item.name}: instalado ${item.installed}; configurado ZAIP ${item.configured}.\n`);
+            }
         }
+        if (profile === "full")
+            await prepareStackTerraform(result.root, (message) => stdout.write(message));
         const sqlite = await bootstrapDashboardSqlite({ workspaceRoot: result.root });
         stdout.write(`Dashboard SQLite pronto: ${sqlite.path} (${sqlite.cache}).\n`);
+        await persistInstallProfile(result.root, profile);
     }
     printResult(stdout, result, version, command.verbose);
     if (command.projectOnly) {

package/dist/commands/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAWrE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAA6B,EAC7B,OAA2B,EAC3B,OAAe,EACf,OAAO,GAAe,EAAE;IAExB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,OAAO,GAAgB;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QACjC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;QAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;QACjC,UAAU,EAAE,OAAO;QACnB,wBAAwB,EAAE,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,WAAW;QACzF,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;KAC7D,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,GAAI,EAAE,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtE,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,iCAAiC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACrF,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAC5F,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC,KAAK,CACV,GAAG,IAAI,CAAC,IAAI,eAAe,IAAI,CAAC,SAAS,sBAAsB,IAAI,CAAC,UAAU,KAAK,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,MAAM,CAAC,CAAC;IAC/E,CAAC;IACD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,2BAA2B,MAAM,CAAC,SAAS,CAAC,MAAM,sFAAsF,CACzI,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAe,EAAE,MAAgB;IACrD,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,CAAE,KAA2B,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;YAC1D,OAAO,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAYvE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAA6B,EAC7B,OAA2B,EAC3B,OAAe,EACf,OAAO,GAAe,EAAE;IAExB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,OAAO,GAAgB;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QACjC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;QAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;QACjC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,UAAU,EAAE,OAAO;QACnB,wBAAwB,EAAE,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,WAAW;QACzF,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;KAC7D,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,GAAI,EAAE,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,iCAAiC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACrF,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;YAC5F,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACzC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;gBACvF,MAAM,CAAC,KAAK,CACV,GAAG,IAAI,CAAC,IAAI,eAAe,IAAI,CAAC,SAAS,sBAAsB,IAAI,CAAC,UAAU,KAAK,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,MAAM;YACpB,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,MAAM,CAAC,CAAC;QAC7E,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IACD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,2BAA2B,MAAM,CAAC,SAAS,CAAC,MAAM,sFAAsF,CACzI,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAe,EAAE,MAAgB;IACrD,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,CAAE,KAA2B,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;YAC1D,OAAO,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import type { CliRuntime, InitOptions, InitResult } from "./types.js";
+export { assertDeliveryGitPreflight, DeliveryGitPreflightError, type DeliveryGitPreflightFinding, type DeliveryGitPreflightResult, } from "./services/delivery-git-preflight.js";
 export { doctorProject } from "./services/doctor.js";
 export { findProjectRoot } from "./services/find-project-root.js";
 export { installAgentsTemplate } from "./services/install-agents-template.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGtE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,wBAAsB,cAAc,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAEnF;AAED,wBAAsB,UAAU,CAC9B,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,GAAE,UAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAsB,MAAM,CAC1B,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,GAAE,UAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA2BjB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGtE,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,GAChC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,wBAAsB,cAAc,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAEnF;AAED,wBAAsB,UAAU,CAC9B,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,GAAE,UAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAsB,MAAM,CAC1B,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,GAAE,UAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA2BjB"}

package/dist/index.js

@@ -6,6 +6,7 @@ import { doctorProject } from "./services/doctor.js";
 import { findProjectRoot } from "./services/find-project-root.js";
 import { installAgentsTemplate } from "./services/install-agents-template.js";
 import { CLI_VERSION } from "./version.js";
+export { assertDeliveryGitPreflight, DeliveryGitPreflightError, } from "./services/delivery-git-preflight.js";
 export { doctorProject } from "./services/doctor.js";
 export { findProjectRoot } from "./services/find-project-root.js";
 export { installAgentsTemplate } from "./services/install-agents-template.js";
@@ -59,6 +60,7 @@ function createProgram(runtime) {
         .option("-f, --force", "cria backup e reinstala o template")
         .option("--dry-run", "mostra o plano sem alterar arquivos")
         .option("--verbose", "mostra detalhes técnicos")
+        .option("--profile <profile>", "perfil: full, dev-lite ou lite")
         .option("--project-only", "instala somente no projeto sem modificar a configuração global do Codex")
         .action(async (directory, options) => {
         await executeInit(directory, options, CLI_VERSION, runtime);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAO,GAAgB,EAAE;IAC5D,OAAO,qBAAqB,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAA6B,EAC7B,OAAO,GAAe,EAAE;IAExB,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,UAA6B,EAC7B,OAAO,GAAe,EAAE;IAExB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,CAAC,eAAe,CAAC;YACtB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YACxC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;SACzC,CAAC,CAAC;QACH,OAAO,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,eAAe,CAAC;QACtB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QACxC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;KACzC,CAAC,CAAC;IACH,OAAO,CAAC,YAAY,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAmB;IACxC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,MAAM,CAAC;SACZ,WAAW,CAAC,mDAAmD,CAAC;SAChE,OAAO,CAAC,WAAW,CAAC,CAAC;IAExB,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,8DAA8D,CAAC;SAC3E,QAAQ,CAAC,aAAa,EAAE,qDAAqD,CAAC;SAC9E,MAAM,CAAC,WAAW,EAAE,0CAA0C,CAAC;SAC/D,MAAM,CAAC,aAAa,EAAE,oCAAoC,CAAC;SAC3D,MAAM,CAAC,WAAW,EAAE,qCAAqC,CAAC;SAC1D,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC;SAC/C,MAAM,CACL,gBAAgB,EAChB,yEAAyE,CAC1E;SACA,MAAM,CAAC,KAAK,EAAE,SAA6B,EAAE,OAAgC,EAAE,EAAE;QAChF,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,qDAAqD,CAAC;SAClE,QAAQ,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC;SACjD,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAA2B,EAAE,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;QAChD,IAAI,OAAO,CAAC,IAAI;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;aAClE,CAAC;YACJ,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,KAAK;gBACV,CAAC,CAAC,+BAA+B,MAAM,CAAC,IAAI,IAAI;gBAChD,CAAC,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,MAAM,kBAAkB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACzJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;IAChG,QAAQ;SACL,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC;SACjD,MAAM,CAAC,SAAS,EAAE,+DAA+D,CAAC;SAClF,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAA4B,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IACL,QAAQ;SACL,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC;SACjD,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAA2B,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;QAChD,MAAM,CAAC,KAAK,CACV,OAAO,CAAC,IAAI;YACV,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;YACxC,CAAC,CAAC,MAAM,CAAC,KAAK;gBACZ,CAAC,CAAC,+BAA+B;gBACjC,CAAC,CAAC,qCAAqC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACzE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB,EAAE,SAAiB;IAChE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAG1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAO,GAAgB,EAAE;IAC5D,OAAO,qBAAqB,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAA6B,EAC7B,OAAO,GAAe,EAAE;IAExB,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,UAA6B,EAC7B,OAAO,GAAe,EAAE;IAExB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,CAAC,eAAe,CAAC;YACtB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YACxC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;SACzC,CAAC,CAAC;QACH,OAAO,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,eAAe,CAAC;QACtB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QACxC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;KACzC,CAAC,CAAC;IACH,OAAO,CAAC,YAAY,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAmB;IACxC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,MAAM,CAAC;SACZ,WAAW,CAAC,mDAAmD,CAAC;SAChE,OAAO,CAAC,WAAW,CAAC,CAAC;IAExB,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,8DAA8D,CAAC;SAC3E,QAAQ,CAAC,aAAa,EAAE,qDAAqD,CAAC;SAC9E,MAAM,CAAC,WAAW,EAAE,0CAA0C,CAAC;SAC/D,MAAM,CAAC,aAAa,EAAE,oCAAoC,CAAC;SAC3D,MAAM,CAAC,WAAW,EAAE,qCAAqC,CAAC;SAC1D,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC;SAC/C,MAAM,CAAC,qBAAqB,EAAE,gCAAgC,CAAC;SAC/D,MAAM,CACL,gBAAgB,EAChB,yEAAyE,CAC1E;SACA,MAAM,CACL,KAAK,EACH,SAA6B,EAC7B,OAOC,EACD,EAAE;QACF,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,qDAAqD,CAAC;SAClE,QAAQ,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC;SACjD,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAA2B,EAAE,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;QAChD,IAAI,OAAO,CAAC,IAAI;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;aAClE,CAAC;YACJ,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,KAAK;gBACV,CAAC,CAAC,+BAA+B,MAAM,CAAC,IAAI,IAAI;gBAChD,CAAC,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,MAAM,kBAAkB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACzJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;IAChG,QAAQ;SACL,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC;SACjD,MAAM,CAAC,SAAS,EAAE,+DAA+D,CAAC;SAClF,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAA4B,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IACL,QAAQ;SACL,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC;SACjD,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAA2B,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;QAChD,MAAM,CAAC,KAAK,CACV,OAAO,CAAC,IAAI;YACV,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;YACxC,CAAC,CAAC,MAAM,CAAC,KAAK;gBACZ,CAAC,CAAC,+BAA+B;gBACjC,CAAC,CAAC,qCAAqC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACzE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB,EAAE,SAAiB;IAChE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;AAC1D,CAAC"}

package/dist/services/adapters.js

@@ -121,7 +121,7 @@ matcher = "^(Bash|shell_command|exec_command|apply_patch|Edit|Write)$"
 [[hooks.PreToolUse.hooks]]
 type = "command"
 command = '''node "$(git rev-parse --show-toplevel)/.codex/hooks/zaip-pre-tool-use.mjs"'''
-command_windows = '''powershell -NoProfile -NonInteractive -Command "$root = git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-pre-tool-use.mjs')"'''
+command_windows = '''powershell -NoProfile -NonInteractive -Command "$git = Join-Path ${CODEX_WORKSPACE_ROOT_PLACEHOLDER} '.local\\git\\cmd\\git.exe'; if (!(Test-Path -LiteralPath $git)) { $git = 'git' }; $root = & $git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-pre-tool-use.mjs')"'''
 timeout = 10
 statusMessage = "Applying ZAIP workspace safety policy"
 
@@ -144,7 +144,7 @@ matcher = "*"
 [[hooks.SubagentStart.hooks]]
 type = "command"
 command = '''node "$(git rev-parse --show-toplevel)/.codex/hooks/zaip-subagent-lifecycle.mjs"'''
-command_windows = '''powershell -NoProfile -NonInteractive -Command "$root = git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')"'''
+command_windows = '''powershell -NoProfile -NonInteractive -Command "$git = Join-Path ${CODEX_WORKSPACE_ROOT_PLACEHOLDER} '.local\\git\\cmd\\git.exe'; if (!(Test-Path -LiteralPath $git)) { $git = 'git' }; $root = & $git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')"'''
 timeout = 3
 statusMessage = "Attributing ZAIP subagent Run"
 
@@ -154,7 +154,7 @@ matcher = "*"
 [[hooks.SubagentStop.hooks]]
 type = "command"
 command = '''node "$(git rev-parse --show-toplevel)/.codex/hooks/zaip-subagent-lifecycle.mjs"'''
-command_windows = '''powershell -NoProfile -NonInteractive -Command "$root = git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')"'''
+command_windows = '''powershell -NoProfile -NonInteractive -Command "$git = Join-Path ${CODEX_WORKSPACE_ROOT_PLACEHOLDER} '.local\\git\\cmd\\git.exe'; if (!(Test-Path -LiteralPath $git)) { $git = 'git' }; $root = & $git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')"'''
 timeout = 3
 statusMessage = "Finalizing ZAIP subagent Run"
 `;
@@ -167,7 +167,7 @@ const CLAUDE_SETTINGS = `{
 }
 `;
 export function adapterFiles(workspaceRoot, catalog) {
-    const codexConfig = CODEX_CONFIG.replace(CODEX_WORKSPACE_ROOT_PLACEHOLDER, JSON.stringify(resolve(workspaceRoot)));
+    const codexConfig = CODEX_CONFIG.replaceAll(CODEX_WORKSPACE_ROOT_PLACEHOLDER, JSON.stringify(resolve(workspaceRoot)));
     return [
         managed("AGENTS.md", renderRootGuidance(catalog), "root-guidance"),
         managed("CLAUDE.md", renderRootGuidance(catalog), "root-guidance"),

package/dist/services/adapters.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/services/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EACL,gBAAgB,EAEhB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAE3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAOxC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;CAmBrB,CAAC;AAEF,SAAS,kBAAkB,CAAC,OAA4B;IACtD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAChD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,oBAAoB,CAAC,CAAC;IACvF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,aAAa,CAAC,OAAO,CAC1B,qOAAqO,EACrO,uRAAuR,YAAY,CAAC,UAAU,yBAAyB,YAAY,CAAC,UAAU,uBAAuB,YAAY,CAAC,eAAe,oIAAoI,CACthB,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG;;;;;;;;;;CAUvB,CAAC;AAEF,MAAM,+BAA+B,GAAG;;;;CAIvC,CAAC;AAEF,MAAM,gCAAgC,GAAG,8BAA8B,CAAC;AAExE,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;6CAgBwB,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyF5E,CAAC;AAEF,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAEpE,MAAM,eAAe,GAAG;;;;;;CAMvB,CAAC;AAEF,MAAM,UAAU,YAAY,CAC1B,aAAqB,EACrB,OAA4B;IAE5B,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CACtC,gCAAgC,EAChC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CACvC,CAAC;IACF,OAAO;QACL,OAAO,CAAC,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;QAClE,OAAO,CAAC,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;QAClE,OAAO,CAAC,kCAAkC,EAAE,eAAe,EAAE,iBAAiB,CAAC;QAC/E,OAAO,CAAC,mCAAmC,EAAE,eAAe,EAAE,iBAAiB,CAAC;QAChF,OAAO,CACL,4CAA4C,EAC5C,+BAA+B,EAC/B,iCAAiC,CAClC;QACD,OAAO,CACL,6CAA6C,EAC7C,+BAA+B,EAC/B,iCAAiC,CAClC;QACD,OAAO,CACL,oBAAoB,EACpB,GAAG,WAAW,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,EAChF,cAAc,CACf;QACD,OAAO,CAAC,oCAAoC,EAAE,mBAAmB,EAAE,mBAAmB,CAAC;QACvF,OAAO,CACL,0CAA0C,EAC1C,6BAA6B,EAC7B,+BAA+B,CAChC;QACD,OAAO,CACL,uCAAuC,EACvC,yBAAyB,EACzB,2BAA2B,CAC5B;QACD,OAAO,CAAC,kCAAkC,EAAE,oBAAoB,EAAE,sBAAsB,CAAC;QACzF,OAAO,CAAC,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAI9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,IACE,OAAO,KAAK,IAAI,CAAC,OAAO;YACxB,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EACjE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,KAAK,GAAG,KAAK;IAEb,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,MAAM,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO;YAAE,SAAS;QACvC,IAAI,OAAO,KAAK,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,SAAS;QAC7E,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YACxE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;IACjF,MAAM,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,MAAM,OAAO,GAAG,uBAAuB,CACrC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,oCAAoC,CAAC,EAAE,MAAM,CAAC,CAC5E,CAAC;IACF,OAAO,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,CACL,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC;YAC1C,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC;YAC5C,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CACzC,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgC,CAAC;QAClE,OAAO,CACL,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC,CAC7F,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,OAAe;IAC3D,OAAO,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,6CAA6C,MAAM,YAAY,gBAAgB,WAAW,QAAQ,EAAE,CAAC;IACpH,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,MAAM,SAAS,IAAI,EAAE,EAAE,CAAC;IAClF,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;IAC7E,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;IAC7E,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;IAC9E,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/services/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EACL,gBAAgB,EAEhB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAE3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAOxC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;CAmBrB,CAAC;AAEF,SAAS,kBAAkB,CAAC,OAA4B;IACtD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAChD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,oBAAoB,CAAC,CAAC;IACvF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,aAAa,CAAC,OAAO,CAC1B,qOAAqO,EACrO,uRAAuR,YAAY,CAAC,UAAU,yBAAyB,YAAY,CAAC,UAAU,uBAAuB,YAAY,CAAC,eAAe,oIAAoI,CACthB,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG;;;;;;;;;;CAUvB,CAAC;AAEF,MAAM,+BAA+B,GAAG;;;;CAIvC,CAAC;AAEF,MAAM,gCAAgC,GAAG,8BAA8B,CAAC;AAExE,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;6CAgBwB,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wFAqDW,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;wFAuBhC,gCAAgC;;;;;;;;;;wFAUhC,gCAAgC;;;CAGvH,CAAC;AAEF,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAEpE,MAAM,eAAe,GAAG;;;;;;CAMvB,CAAC;AAEF,MAAM,UAAU,YAAY,CAC1B,aAAqB,EACrB,OAA4B;IAE5B,MAAM,WAAW,GAAG,YAAY,CAAC,UAAU,CACzC,gCAAgC,EAChC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CACvC,CAAC;IACF,OAAO;QACL,OAAO,CAAC,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;QAClE,OAAO,CAAC,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;QAClE,OAAO,CAAC,kCAAkC,EAAE,eAAe,EAAE,iBAAiB,CAAC;QAC/E,OAAO,CAAC,mCAAmC,EAAE,eAAe,EAAE,iBAAiB,CAAC;QAChF,OAAO,CACL,4CAA4C,EAC5C,+BAA+B,EAC/B,iCAAiC,CAClC;QACD,OAAO,CACL,6CAA6C,EAC7C,+BAA+B,EAC/B,iCAAiC,CAClC;QACD,OAAO,CACL,oBAAoB,EACpB,GAAG,WAAW,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,EAChF,cAAc,CACf;QACD,OAAO,CAAC,oCAAoC,EAAE,mBAAmB,EAAE,mBAAmB,CAAC;QACvF,OAAO,CACL,0CAA0C,EAC1C,6BAA6B,EAC7B,+BAA+B,CAChC;QACD,OAAO,CACL,uCAAuC,EACvC,yBAAyB,EACzB,2BAA2B,CAC5B;QACD,OAAO,CAAC,kCAAkC,EAAE,oBAAoB,EAAE,sBAAsB,CAAC;QACzF,OAAO,CAAC,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAI9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,IACE,OAAO,KAAK,IAAI,CAAC,OAAO;YACxB,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EACjE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,KAAK,GAAG,KAAK;IAEb,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,MAAM,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO;YAAE,SAAS;QACvC,IAAI,OAAO,KAAK,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,SAAS;QAC7E,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YACxE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;IACjF,MAAM,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,MAAM,OAAO,GAAG,uBAAuB,CACrC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,oCAAoC,CAAC,EAAE,MAAM,CAAC,CAC5E,CAAC;IACF,OAAO,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,CACL,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC;YAC1C,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC;YAC5C,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CACzC,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgC,CAAC;QAClE,OAAO,CACL,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC,CAC7F,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,OAAe;IAC3D,OAAO,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,6CAA6C,MAAM,YAAY,gBAAgB,WAAW,QAAQ,EAAE,CAAC;IACpH,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,MAAM,SAAS,IAAI,EAAE,EAAE,CAAC;IAClF,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;IAC7E,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;IAC7E,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;IAC9E,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAC9E,CAAC"}

package/dist/services/codex-config-template.d.ts

@@ -1,4 +1,4 @@
 export declare const CODEX_WORKSPACE_ROOT_PLACEHOLDER = "__ZAIP_WORKSPACE_ROOT_TOML__";
-export declare const CODEX_PRE_TOOL_USE_HOOK = "[[hooks.PreToolUse]]\nmatcher = \"^(Bash|shell_command|exec_command|apply_patch|Edit|Write)$\"\n\n[[hooks.PreToolUse.hooks]]\ntype = \"command\"\ncommand = '''node \"$(git rev-parse --show-toplevel)/.codex/hooks/zaip-pre-tool-use.mjs\"'''\ncommand_windows = '''powershell -NoProfile -NonInteractive -Command \"$root = git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-pre-tool-use.mjs')\"'''\ntimeout = 10\nstatusMessage = \"Applying ZAIP workspace safety policy\"";
-export declare const CODEX_CONFIG = "project_doc_fallback_filenames = [\"AGENTS.md\"]\napproval_policy = \"never\"\ndefault_permissions = \"zaip-aios-full-access\"\nallow_login_shell = true\nweb_search = \"live\"\ndeveloper_instructions = \"\"\"\nThe default full-access profile permits unrestricted development. Follow the user's current request.\n\"\"\"\n\n[permissions.zaip-aios-security]\ndescription = \"Zaip AIOS workspace-only development with security. (low risk)\"\n\n[permissions.zaip-aios-security.filesystem]\n\":minimal\" = \"read\"\n\"~/.ssh\" = \"write\"\n\n[permissions.zaip-aios-security.filesystem.__ZAIP_WORKSPACE_ROOT_TOML__]\n\".\" = \"write\"\n\".git\" = \"write\"\n\".agents\" = \"write\"\n\".codex\" = \"write\"\n\n[permissions.zaip-aios-security.network]\nenabled = true\nmode = \"limited\"\n\n[permissions.zaip-aios-security.network.domains]\n\"github.com\" = \"allow\"\n\n[permissions.zaip-aios-full-access]\ndescription = \"Zaip AIOS unrestricted full access. (higher risk)\"\n\n[permissions.zaip-aios-full-access.filesystem]\n\":root\" = \"write\"\n\n[permissions.zaip-aios-full-access.network]\nenabled = true\nmode = \"full\"\n\n[permissions.zaip-aios-full-access.network.domains]\n\"*\" = \"allow\"\n\n[shell_environment_policy]\ninherit = \"all\"\nignore_default_excludes = true\nexclude = []\ninclude_only = []\nexperimental_use_profile = false\n\n[shell_environment_policy.set]\nBROWSER_USE_AVAILABLE_BACKENDS = \"chrome,iab\"\n\n[plugins.\"browser@openai-bundled\"]\nenabled = true\n\n[plugins.\"computer-use@openai-bundled\"]\nenabled = true\n\n[features]\nhooks = true\nunified_exec = false\njs_repl = true\n\n[[hooks.PreToolUse]]\nmatcher = \"^(Bash|shell_command|exec_command|apply_patch|Edit|Write)$\"\n\n[[hooks.PreToolUse.hooks]]\ntype = \"command\"\ncommand = '''node \"$(git rev-parse --show-toplevel)/.codex/hooks/zaip-pre-tool-use.mjs\"'''\ncommand_windows = '''powershell -NoProfile -NonInteractive -Command \"$root = git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-pre-tool-use.mjs')\"'''\ntimeout = 10\nstatusMessage = \"Applying ZAIP workspace safety policy\"\n\n[apps._default]\ndestructive_enabled = true\nopen_world_enabled = true\ndefault_tools_approval_mode = \"approve\"\n\n[mcp_servers.openaiDeveloperDocs]\nurl = \"https://developers.openai.com/mcp\"\nenabled = true\nenabled_tools = [\"search_openai_docs\", \"fetch_openai_doc\", \"list_openai_docs\", \"get_openapi_spec\", \"list_api_endpoints\"]\ndefault_tools_approval_mode = \"approve\"\nstartup_timeout_sec = 20\ntool_timeout_sec = 60\n\n[[hooks.SubagentStart]]\nmatcher = \"*\"\n\n[[hooks.SubagentStart.hooks]]\ntype = \"command\"\ncommand = '''node \"$(git rev-parse --show-toplevel)/.codex/hooks/zaip-subagent-lifecycle.mjs\"'''\ncommand_windows = '''powershell -NoProfile -NonInteractive -Command \"$root = git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')\"'''\ntimeout = 3\nstatusMessage = \"Attributing ZAIP subagent Run\"\n\n[[hooks.SubagentStop]]\nmatcher = \"*\"\n\n[[hooks.SubagentStop.hooks]]\ntype = \"command\"\ncommand = '''node \"$(git rev-parse --show-toplevel)/.codex/hooks/zaip-subagent-lifecycle.mjs\"'''\ncommand_windows = '''powershell -NoProfile -NonInteractive -Command \"$root = git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')\"'''\ntimeout = 3\nstatusMessage = \"Finalizing ZAIP subagent Run\"\n";
+export declare const CODEX_PRE_TOOL_USE_HOOK = "[[hooks.PreToolUse]]\nmatcher = \"^(Bash|shell_command|exec_command|apply_patch|Edit|Write)$\"\n\n[[hooks.PreToolUse.hooks]]\ntype = \"command\"\ncommand = '''node \"$(git rev-parse --show-toplevel)/.codex/hooks/zaip-pre-tool-use.mjs\"'''\ncommand_windows = '''powershell -NoProfile -NonInteractive -Command \"$git = Join-Path __ZAIP_WORKSPACE_ROOT_TOML__ '.local\\git\\cmd\\git.exe'; if (!(Test-Path -LiteralPath $git)) { $git = 'git' }; $root = & $git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-pre-tool-use.mjs')\"'''\ntimeout = 10\nstatusMessage = \"Applying ZAIP workspace safety policy\"";
+export declare const CODEX_CONFIG = "project_doc_fallback_filenames = [\"AGENTS.md\"]\napproval_policy = \"never\"\ndefault_permissions = \"zaip-aios-full-access\"\nallow_login_shell = true\nweb_search = \"live\"\ndeveloper_instructions = \"\"\"\nThe default full-access profile permits unrestricted development. Follow the user's current request.\n\"\"\"\n\n[permissions.zaip-aios-security]\ndescription = \"Zaip AIOS workspace-only development with security. (low risk)\"\n\n[permissions.zaip-aios-security.filesystem]\n\":minimal\" = \"read\"\n\"~/.ssh\" = \"write\"\n\n[permissions.zaip-aios-security.filesystem.__ZAIP_WORKSPACE_ROOT_TOML__]\n\".\" = \"write\"\n\".git\" = \"write\"\n\".agents\" = \"write\"\n\".codex\" = \"write\"\n\n[permissions.zaip-aios-security.network]\nenabled = true\nmode = \"limited\"\n\n[permissions.zaip-aios-security.network.domains]\n\"github.com\" = \"allow\"\n\n[permissions.zaip-aios-full-access]\ndescription = \"Zaip AIOS unrestricted full access. (higher risk)\"\n\n[permissions.zaip-aios-full-access.filesystem]\n\":root\" = \"write\"\n\n[permissions.zaip-aios-full-access.network]\nenabled = true\nmode = \"full\"\n\n[permissions.zaip-aios-full-access.network.domains]\n\"*\" = \"allow\"\n\n[shell_environment_policy]\ninherit = \"all\"\nignore_default_excludes = true\nexclude = []\ninclude_only = []\nexperimental_use_profile = false\n\n[shell_environment_policy.set]\nBROWSER_USE_AVAILABLE_BACKENDS = \"chrome,iab\"\n\n[plugins.\"browser@openai-bundled\"]\nenabled = true\n\n[plugins.\"computer-use@openai-bundled\"]\nenabled = true\n\n[features]\nhooks = true\nunified_exec = false\njs_repl = true\n\n[[hooks.PreToolUse]]\nmatcher = \"^(Bash|shell_command|exec_command|apply_patch|Edit|Write)$\"\n\n[[hooks.PreToolUse.hooks]]\ntype = \"command\"\ncommand = '''node \"$(git rev-parse --show-toplevel)/.codex/hooks/zaip-pre-tool-use.mjs\"'''\ncommand_windows = '''powershell -NoProfile -NonInteractive -Command \"$git = Join-Path __ZAIP_WORKSPACE_ROOT_TOML__ '.local\\git\\cmd\\git.exe'; if (!(Test-Path -LiteralPath $git)) { $git = 'git' }; $root = & $git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-pre-tool-use.mjs')\"'''\ntimeout = 10\nstatusMessage = \"Applying ZAIP workspace safety policy\"\n\n[apps._default]\ndestructive_enabled = true\nopen_world_enabled = true\ndefault_tools_approval_mode = \"approve\"\n\n[mcp_servers.openaiDeveloperDocs]\nurl = \"https://developers.openai.com/mcp\"\nenabled = true\nenabled_tools = [\"search_openai_docs\", \"fetch_openai_doc\", \"list_openai_docs\", \"get_openapi_spec\", \"list_api_endpoints\"]\ndefault_tools_approval_mode = \"approve\"\nstartup_timeout_sec = 20\ntool_timeout_sec = 60\n\n[[hooks.SubagentStart]]\nmatcher = \"*\"\n\n[[hooks.SubagentStart.hooks]]\ntype = \"command\"\ncommand = '''node \"$(git rev-parse --show-toplevel)/.codex/hooks/zaip-subagent-lifecycle.mjs\"'''\ncommand_windows = '''powershell -NoProfile -NonInteractive -Command \"$git = Join-Path __ZAIP_WORKSPACE_ROOT_TOML__ '.local\\git\\cmd\\git.exe'; if (!(Test-Path -LiteralPath $git)) { $git = 'git' }; $root = & $git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')\"'''\ntimeout = 3\nstatusMessage = \"Attributing ZAIP subagent Run\"\n\n[[hooks.SubagentStop]]\nmatcher = \"*\"\n\n[[hooks.SubagentStop.hooks]]\ntype = \"command\"\ncommand = '''node \"$(git rev-parse --show-toplevel)/.codex/hooks/zaip-subagent-lifecycle.mjs\"'''\ncommand_windows = '''powershell -NoProfile -NonInteractive -Command \"$git = Join-Path __ZAIP_WORKSPACE_ROOT_TOML__ '.local\\git\\cmd\\git.exe'; if (!(Test-Path -LiteralPath $git)) { $git = 'git' }; $root = & $git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')\"'''\ntimeout = 3\nstatusMessage = \"Finalizing ZAIP subagent Run\"\n";
 //# sourceMappingURL=codex-config-template.d.ts.map

package/dist/services/codex-config-template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-config-template.d.ts","sourceRoot":"","sources":["../../src/services/codex-config-template.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gCAAgC,iCAAiC,CAAC;AAE/E,eAAO,MAAM,uBAAuB,2eAQoB,CAAC;AAEzD,eAAO,MAAM,YAAY,g2GAiGxB,CAAC"}
+{"version":3,"file":"codex-config-template.d.ts","sourceRoot":"","sources":["../../src/services/codex-config-template.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gCAAgC,iCAAiC,CAAC;AAE/E,eAAO,MAAM,uBAAuB,+mBAQoB,CAAC;AAEzD,eAAO,MAAM,YAAY,4uHAiGxB,CAAC"}

package/dist/services/codex-config-template.js

@@ -5,7 +5,7 @@ matcher = "^(Bash|shell_command|exec_command|apply_patch|Edit|Write)$"
 [[hooks.PreToolUse.hooks]]
 type = "command"
 command = '''node "$(git rev-parse --show-toplevel)/.codex/hooks/zaip-pre-tool-use.mjs"'''
-command_windows = '''powershell -NoProfile -NonInteractive -Command "$root = git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-pre-tool-use.mjs')"'''
+command_windows = '''powershell -NoProfile -NonInteractive -Command "$git = Join-Path ${CODEX_WORKSPACE_ROOT_PLACEHOLDER} '.local\\git\\cmd\\git.exe'; if (!(Test-Path -LiteralPath $git)) { $git = 'git' }; $root = & $git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-pre-tool-use.mjs')"'''
 timeout = 10
 statusMessage = "Applying ZAIP workspace safety policy"`;
 export const CODEX_CONFIG = `project_doc_fallback_filenames = ["AGENTS.md"]
@@ -92,7 +92,7 @@ matcher = "*"
 [[hooks.SubagentStart.hooks]]
 type = "command"
 command = '''node "$(git rev-parse --show-toplevel)/.codex/hooks/zaip-subagent-lifecycle.mjs"'''
-command_windows = '''powershell -NoProfile -NonInteractive -Command "$root = git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')"'''
+command_windows = '''powershell -NoProfile -NonInteractive -Command "$git = Join-Path ${CODEX_WORKSPACE_ROOT_PLACEHOLDER} '.local\\git\\cmd\\git.exe'; if (!(Test-Path -LiteralPath $git)) { $git = 'git' }; $root = & $git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')"'''
 timeout = 3
 statusMessage = "Attributing ZAIP subagent Run"
 
@@ -102,7 +102,7 @@ matcher = "*"
 [[hooks.SubagentStop.hooks]]
 type = "command"
 command = '''node "$(git rev-parse --show-toplevel)/.codex/hooks/zaip-subagent-lifecycle.mjs"'''
-command_windows = '''powershell -NoProfile -NonInteractive -Command "$root = git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')"'''
+command_windows = '''powershell -NoProfile -NonInteractive -Command "$git = Join-Path ${CODEX_WORKSPACE_ROOT_PLACEHOLDER} '.local\\git\\cmd\\git.exe'; if (!(Test-Path -LiteralPath $git)) { $git = 'git' }; $root = & $git rev-parse --show-toplevel; node (Join-Path $root '.codex/hooks/zaip-subagent-lifecycle.mjs')"'''
 timeout = 3
 statusMessage = "Finalizing ZAIP subagent Run"
 `;

package/dist/services/codex-config-template.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex-config-template.js","sourceRoot":"","sources":["../../src/services/codex-config-template.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gCAAgC,GAAG,8BAA8B,CAAC;AAE/E,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;wDAQiB,CAAC;AAEzD,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;6CAgBiB,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+C3E,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCxB,CAAC"}
+{"version":3,"file":"codex-config-template.js","sourceRoot":"","sources":["../../src/services/codex-config-template.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gCAAgC,GAAG,8BAA8B,CAAC;AAE/E,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;wFAMiD,gCAAgC;;wDAEhE,CAAC;AAEzD,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;6CAgBiB,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+C3E,uBAAuB;;;;;;;;;;;;;;;;;;;;;wFAqB+D,gCAAgC;;;;;;;;;;wFAUhC,gCAAgC;;;CAGvH,CAAC"}

package/dist/services/codex-rules.d.ts

@@ -1,3 +1,3 @@
-export declare const CODEX_GITHUB_DEPLOY_RULES = "# GitHub-only publication commands that may cross the workspace sandbox without prompting.\n# Only an explicit deploy request activates the ZAIP deploy skill. Its bounded flow may reconcile\n# the selected branch and form evidenced functional commits with explicit pathspecs.\n\nprefix_rule(\n    pattern = [\"node\", \".agents/skills/zaip-skill-github-deploy/scripts/preflight.mjs\"],\n    decision = \"allow\",\n    justification = \"Run the sanitized, repository-owned folder-scoped SSH preflight.\",\n    match = [\"node .agents/skills/zaip-skill-github-deploy/scripts/preflight.mjs --repository . --remote origin --branch demo\"],\n    not_match = [\"node scripts/other.mjs\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"fetch\"],\n    decision = \"allow\",\n    justification = \"Fetch the selected GitHub remote once to prove the branch is not behind or diverged.\",\n    match = [\"git fetch origin demo\"],\n    not_match = [\"git pull origin demo\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"add\", \"--\"],\n    decision = \"allow\",\n    justification = \"Stage only an evidenced functional group with explicit pathspecs during an authorized deploy.\",\n    match = [\"git add -- README.md\", \"git add -- packages/core/src/example.ts\"],\n    not_match = [\"git add -A\", \"git add --all\", \"git add .\", \"git add -u\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"commit\", \"-m\"],\n    decision = \"allow\",\n    justification = \"Create an evidenced functional commit without rewriting history during an authorized deploy.\",\n    match = ['git commit -m \"[CODEX] Atualizar contrato de deploy\"'],\n    not_match = [\"git commit --amend -m repair\", \"git commit --no-verify -m repair\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"stash\", \"push\", \"--include-untracked\"],\n    decision = \"allow\",\n    justification = \"Preserve the selected deploy diff without dropping history.\",\n    match = [\"git stash push --include-untracked -m deploy-preserve\"],\n    not_match = [\"git stash drop\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"stash\", \"apply\"],\n    decision = \"allow\",\n    justification = \"Reapply the preserved selected deploy diff.\",\n    match = [\"git stash apply\"],\n    not_match = [\"git stash drop\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"rebase\", \"origin/demo\"],\n    decision = \"allow\",\n    justification = \"Reconcile only the selected deploy branch.\",\n    match = [\"git rebase origin/demo\"],\n    not_match = [\"git rebase --abort\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"merge\", \"origin/demo\"],\n    decision = \"allow\",\n    justification = \"Reconcile only the selected deploy branch.\",\n    match = [\"git merge origin/demo\"],\n    not_match = [\"git merge --abort\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"push\"],\n    decision = \"allow\",\n    justification = \"Publish only the policy-authorized demo branch after ZAIP preflight.\",\n    match = [\"git push origin demo\", \"git push -u origin demo\"],\n    not_match = [\"git pull\", \"ssh -i key git@github.com\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"ls-remote\"],\n    decision = \"allow\",\n    justification = \"Verify GitHub connectivity and the exact remote branch hash.\",\n    match = [\"git ls-remote origin refs/heads/demo\"],\n    not_match = [\"git remote set-url origin git@github.com:other/repo.git\"],\n)\n\nprefix_rule(\n    pattern = [\"gh\", \"auth\", \"status\"],\n    decision = \"allow\",\n    justification = \"Inspect GitHub CLI authentication without changing credentials.\",\n    match = [\"gh auth status\"],\n    not_match = [\"gh auth login\"],\n)\n\nprefix_rule(\n    pattern = [\"gh\", \"run\", [\"list\", \"view\", \"watch\"]],\n    decision = \"allow\",\n    justification = \"Observe GitHub Actions checks for the just-pushed commit.\",\n    match = [\"gh run list\", \"gh run view 123\", \"gh run watch 123\"],\n    not_match = [\"gh run cancel 123\", \"gh run delete 123\"],\n)\n\nprefix_rule(\n    pattern = [\"gh\", \"pr\", [\"view\", \"checks\"]],\n    decision = \"allow\",\n    justification = \"Read pull-request metadata and required checks for the current repository.\",\n    match = [\"gh pr view\", \"gh pr checks\"],\n    not_match = [\"gh pr create\", \"gh pr merge\"],\n)\n";
+export declare const CODEX_GITHUB_DEPLOY_RULES = "# GitHub-only publication commands that may cross the workspace sandbox without prompting.\n# Only an explicit deploy request activates the ZAIP deploy skill. Its bounded flow may reconcile\n# the branch resolved fresh from project.yaml deploy.branch and form evidenced functional commits\n# with explicit pathspecs. The fallback is main only when that file or key is absent.\n\nprefix_rule(\n    pattern = [\"node\", \".agents/skills/zaip-skill-github-deploy/scripts/preflight.mjs\"],\n    decision = \"allow\",\n    justification = \"Run the sanitized, repository-owned folder-scoped SSH preflight.\",\n    match = [\"node .agents/skills/zaip-skill-github-deploy/scripts/preflight.mjs --repository . --remote origin\"],\n    not_match = [\"node scripts/other.mjs\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"fetch\"],\n    decision = \"allow\",\n    justification = \"Fetch the configured GitHub remote once before checking the configured deploy branch.\",\n    match = [\"git fetch origin\"],\n    not_match = [\"git pull origin\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"add\", \"--\"],\n    decision = \"allow\",\n    justification = \"Stage only an evidenced functional group with explicit pathspecs during an authorized deploy.\",\n    match = [\"git add -- README.md\", \"git add -- packages/core/src/example.ts\"],\n    not_match = [\"git add -A\", \"git add --all\", \"git add .\", \"git add -u\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"commit\", \"-m\"],\n    decision = \"allow\",\n    justification = \"Create an evidenced functional commit without rewriting history during an authorized deploy.\",\n    match = ['git commit -m \"[CODEX] Atualizar contrato de deploy\"'],\n    not_match = [\"git commit --amend -m repair\", \"git commit --no-verify -m repair\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"stash\", \"push\", \"--include-untracked\"],\n    decision = \"allow\",\n    justification = \"Preserve the selected deploy diff without dropping history.\",\n    match = [\"git stash push --include-untracked -m deploy-preserve\"],\n    not_match = [\"git stash drop\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"stash\", \"apply\"],\n    decision = \"allow\",\n    justification = \"Reapply the preserved selected deploy diff.\",\n    match = [\"git stash apply\"],\n    not_match = [\"git stash drop\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"push\"],\n    decision = \"allow\",\n    justification = \"Publish only deploy.branch with an explicit refspec after ZAIP preflight.\",\n    match = [\"git push origin HEAD:refs/heads/main\"],\n    not_match = [\"git pull\", \"ssh -i key git@github.com\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", \"ls-remote\"],\n    decision = \"allow\",\n    justification = \"Verify GitHub connectivity and the exact remote branch hash.\",\n    match = [\"git ls-remote origin refs/heads/main\"],\n    not_match = [\"git remote set-url origin git@github.com:other/repo.git\"],\n)\n\nprefix_rule(\n    pattern = [\"gh\", \"auth\", \"status\"],\n    decision = \"allow\",\n    justification = \"Inspect GitHub CLI authentication without changing credentials.\",\n    match = [\"gh auth status\"],\n    not_match = [\"gh auth login\"],\n)\n\nprefix_rule(\n    pattern = [\"gh\", \"run\", [\"list\", \"view\", \"watch\"]],\n    decision = \"allow\",\n    justification = \"Observe GitHub Actions checks for the just-pushed commit.\",\n    match = [\"gh run list\", \"gh run view 123\", \"gh run watch 123\"],\n    not_match = [\"gh run cancel 123\", \"gh run delete 123\"],\n)\n\nprefix_rule(\n    pattern = [\"gh\", \"pr\", [\"view\", \"checks\"]],\n    decision = \"allow\",\n    justification = \"Read pull-request metadata and required checks for the current repository.\",\n    match = [\"gh pr view\", \"gh pr checks\"],\n    not_match = [\"gh pr create\", \"gh pr merge\"],\n)\n";
 export declare const CODEX_SECURITY_RULES = "# Fail-closed defense in depth for commands that must never prompt or execute.\n# Native permission profiles, repository instructions, and these forbidden rules form the active boundary.\n\nprefix_rule(\n    pattern = [\"git\", [\"clean\", \"reset\", \"restore\"]],\n    decision = \"forbidden\",\n    justification = \"Use non-destructive Git inspection and an explicit file-level patch instead.\",\n    match = [\"git reset --hard\", \"git clean -fd\", \"git restore README.md\"],\n)\n\nprefix_rule(\n    pattern = [\"git\", [\"-c\", \"--config\", \"--config-env\", \"--git-dir\", \"--work-tree\", \"--namespace\"]],\n    decision = \"forbidden\",\n    justification = \"Git configuration and repository-routing overrides can bypass the managed safety hook.\",\n    match = [\"git -c core.hooksPath=/tmp/empty commit -m bypass\", \"git --config core.hooksPath=/tmp/empty commit -m bypass\"],\n)\n\nprefix_rule(\n    pattern = [[\"reg\", \"reg.exe\", \"schtasks\", \"schtasks.exe\", \"sc\", \"sc.exe\", \"diskpart\", \"format\", \"bcdedit\", \"fsutil\", \"takeown\", \"icacls\"]],\n    decision = \"forbidden\",\n    justification = \"Operating-system persistence, disk, service, ownership, and ACL changes are outside repository scope.\",\n    match = [\"reg add HKCU\\Software\\Example\", \"schtasks /create /tn example\", \"diskpart\"],\n)\n\nprefix_rule(\n    pattern = [[\"runas\", \"sudo\", \"gsudo\"]],\n    decision = \"forbidden\",\n    justification = \"Privilege escalation is never allowed from ZAIP repository work.\",\n    match = [\"runas /user:Administrator cmd\", \"sudo rm -rf /\"],\n)\n\nprefix_rule(\n    pattern = [[\"winget\", \"choco\", \"scoop\"]],\n    decision = \"forbidden\",\n    justification = \"System package management is outside repository scope; use project-local dependencies.\",\n    match = [\"winget install Git.Git\", \"choco upgrade nodejs\", \"scoop install jq\"],\n)\n\nprefix_rule(\n    pattern = [[\"ssh\", \"scp\", \"sftp\", \"rsync\", \"ftp\", \"telnet\", \"nc\", \"ncat\"]],\n    decision = \"forbidden\",\n    justification = \"Use the repository-owned GitHub deploy preflight and Git commands instead of direct remote clients.\",\n    match = [\"ssh host\", \"scp file host:/tmp\", \"nc -l 4444\"],\n)\n";
 //# sourceMappingURL=codex-rules.d.ts.map

package/dist/services/codex-rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-rules.d.ts","sourceRoot":"","sources":["../../src/services/codex-rules.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,yBAAyB,2tIA2GrC,CAAC;AAEF,eAAO,MAAM,oBAAoB,otEA4ChC,CAAC"}
+{"version":3,"file":"codex-rules.d.ts","sourceRoot":"","sources":["../../src/services/codex-rules.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,yBAAyB,myHA4FrC,CAAC;AAEF,eAAO,MAAM,oBAAoB,otEA4ChC,CAAC"}

package/dist/services/codex-rules.js

@@ -1,21 +1,22 @@
 export const CODEX_GITHUB_DEPLOY_RULES = `# GitHub-only publication commands that may cross the workspace sandbox without prompting.
 # Only an explicit deploy request activates the ZAIP deploy skill. Its bounded flow may reconcile
-# the selected branch and form evidenced functional commits with explicit pathspecs.
+# the branch resolved fresh from project.yaml deploy.branch and form evidenced functional commits
+# with explicit pathspecs. The fallback is main only when that file or key is absent.
 
 prefix_rule(
     pattern = ["node", ".agents/skills/zaip-skill-github-deploy/scripts/preflight.mjs"],
     decision = "allow",
     justification = "Run the sanitized, repository-owned folder-scoped SSH preflight.",
-    match = ["node .agents/skills/zaip-skill-github-deploy/scripts/preflight.mjs --repository . --remote origin --branch demo"],
+    match = ["node .agents/skills/zaip-skill-github-deploy/scripts/preflight.mjs --repository . --remote origin"],
     not_match = ["node scripts/other.mjs"],
 )
 
 prefix_rule(
     pattern = ["git", "fetch"],
     decision = "allow",
-    justification = "Fetch the selected GitHub remote once to prove the branch is not behind or diverged.",
-    match = ["git fetch origin demo"],
-    not_match = ["git pull origin demo"],
+    justification = "Fetch the configured GitHub remote once before checking the configured deploy branch.",
+    match = ["git fetch origin"],
+    not_match = ["git pull origin"],
 )
 
 prefix_rule(
@@ -50,27 +51,11 @@ prefix_rule(
     not_match = ["git stash drop"],
 )
 
-prefix_rule(
-    pattern = ["git", "rebase", "origin/demo"],
-    decision = "allow",
-    justification = "Reconcile only the selected deploy branch.",
-    match = ["git rebase origin/demo"],
-    not_match = ["git rebase --abort"],
-)
-
-prefix_rule(
-    pattern = ["git", "merge", "origin/demo"],
-    decision = "allow",
-    justification = "Reconcile only the selected deploy branch.",
-    match = ["git merge origin/demo"],
-    not_match = ["git merge --abort"],
-)
-
 prefix_rule(
     pattern = ["git", "push"],
     decision = "allow",
-    justification = "Publish only the policy-authorized demo branch after ZAIP preflight.",
-    match = ["git push origin demo", "git push -u origin demo"],
+    justification = "Publish only deploy.branch with an explicit refspec after ZAIP preflight.",
+    match = ["git push origin HEAD:refs/heads/main"],
     not_match = ["git pull", "ssh -i key git@github.com"],
 )
 
@@ -78,7 +63,7 @@ prefix_rule(
     pattern = ["git", "ls-remote"],
     decision = "allow",
     justification = "Verify GitHub connectivity and the exact remote branch hash.",
-    match = ["git ls-remote origin refs/heads/demo"],
+    match = ["git ls-remote origin refs/heads/main"],
     not_match = ["git remote set-url origin git@github.com:other/repo.git"],
 )
 

package/dist/services/codex-rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex-rules.js","sourceRoot":"","sources":["../../src/services/codex-rules.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2GxC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4CnC,CAAC"}
+{"version":3,"file":"codex-rules.js","sourceRoot":"","sources":["../../src/services/codex-rules.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4FxC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4CnC,CAAC"}

package/dist/services/delivery-git-preflight.d.ts

@@ -0,0 +1,23 @@
+export type DeliveryGitPreflightCode = "git-unavailable" | "git-repository-required" | "git-head-required" | "git-user-name-required" | "git-user-email-required";
+export interface DeliveryGitPreflightFinding {
+    code: DeliveryGitPreflightCode;
+    message: string;
+    action: string;
+}
+export interface DeliveryGitPreflightResult {
+    git: string;
+    head: string;
+    user_name: string;
+    user_email: string;
+}
+export declare class DeliveryGitPreflightError extends Error {
+    readonly finding: DeliveryGitPreflightFinding;
+    constructor(finding: DeliveryGitPreflightFinding);
+    toJSON(): DeliveryGitPreflightFinding;
+}
+/**
+ * Delivery has a stricter boundary than installation: init may lay out ZAIP
+ * files outside Git, but persistent delivery needs a local history and author.
+ */
+export declare function assertDeliveryGitPreflight(root: string): Promise<DeliveryGitPreflightResult>;
+//# sourceMappingURL=delivery-git-preflight.d.ts.map

package/dist/services/delivery-git-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-git-preflight.d.ts","sourceRoot":"","sources":["../../src/services/delivery-git-preflight.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,yBAAyB,GACzB,mBAAmB,GACnB,wBAAwB,GACxB,yBAAyB,CAAC;AAE9B,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,wBAAwB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,OAAO,EAAE,2BAA2B;IAAzD,YAAqB,OAAO,EAAE,2BAA2B,EAGxD;IAED,MAAM,IAAI,2BAA2B,CAEpC;CACF;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,0BAA0B,CAAC,CA2CrC"}

package/dist/services/delivery-git-preflight.js

@@ -0,0 +1,69 @@
+import { execFile } from "node:child_process";
+import { stat } from "node:fs/promises";
+import { join } from "node:path";
+import { promisify } from "node:util";
+const exec = promisify(execFile);
+export class DeliveryGitPreflightError extends Error {
+    finding;
+    constructor(finding) {
+        super(finding.message);
+        this.finding = finding;
+        this.name = "DeliveryGitPreflightError";
+    }
+    toJSON() {
+        return this.finding;
+    }
+}
+/**
+ * Delivery has a stricter boundary than installation: init may lay out ZAIP
+ * files outside Git, but persistent delivery needs a local history and author.
+ */
+export async function assertDeliveryGitPreflight(root) {
+    const git = await gitExecutable(root);
+    const version = await runGit(git, root, ["--version"]);
+    if (version === null)
+        fail("git-unavailable", "Git não está disponível para iniciar a delivery.", "Instale ou repare o Git e repita a execução.");
+    const inside = await runGit(git, root, ["rev-parse", "--is-inside-work-tree"]);
+    if (inside?.trim() !== "true")
+        fail("git-repository-required", "A delivery exige um diretório dentro de um repositório Git.", "Execute git init ou abra um repositório existente antes de iniciar a delivery.");
+    const head = await runGit(git, root, ["rev-parse", "HEAD"]);
+    if (head === null || !/^[a-f0-9]{40,64}$/i.test(head.trim()))
+        fail("git-head-required", "A delivery exige pelo menos um commit Git (HEAD).", "Crie o commit inicial antes de iniciar a delivery.");
+    const userName = await runGit(git, root, ["config", "--get", "user.name"]);
+    if (userName === null || userName.trim().length === 0)
+        fail("git-user-name-required", "A delivery exige Git user.name configurado.", 'Execute git config user.name "Seu Nome" e repita.');
+    const userEmail = await runGit(git, root, ["config", "--get", "user.email"]);
+    if (userEmail === null || userEmail.trim().length === 0)
+        fail("git-user-email-required", "A delivery exige Git user.email configurado.", 'Execute git config user.email "voce@exemplo.com" e repita.');
+    return {
+        git: version.trim(),
+        head: head.trim(),
+        user_name: userName.trim(),
+        user_email: userEmail.trim(),
+    };
+}
+function fail(code, message, action) {
+    throw new DeliveryGitPreflightError({ code, message, action });
+}
+async function gitExecutable(root) {
+    if (process.platform !== "win32")
+        return "git";
+    const local = join(root, ".local", "git", "cmd", "git.exe");
+    try {
+        if ((await stat(local)).isFile())
+            return local;
+    }
+    catch {
+        // The system Git is the fallback when the managed portable copy is absent.
+    }
+    return "git";
+}
+async function runGit(git, cwd, args) {
+    try {
+        return (await exec(git, [...args], { cwd, encoding: "utf8", windowsHide: true, timeout: 10_000 })).stdout;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=delivery-git-preflight.js.map