agents-inc 0.172.0 → 0.174.0

package/CHANGELOG.md

@@ -7,6 +7,74 @@ Each release has detailed notes in its own file under [`changelogs/`](./changelo
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.174.0] - 2026-10-24
+
+**Every summary names a skill by the display name its install recorded, `init --from` and `edit --from` stop when a marketplace refuses the version check, every command says an old `.claude-src/` is ignored, and the editor says when an account's stacks could not be read, with Retry**
+
+- REPO-44: the standards, the journey page and the findings follow the code.
+- REPO-45: the git rule in both `CLAUDE.md` files names its one exception, a `commit-plan` skill run.
+- CLI-963: `init --from` and `edit --from` record each skill's display name in `config.ts`, and every summary names a skill by it, then by the catalogue's name, then by its id.
+- CLI-959: `list` at a terminal shows each skill by the name its install recorded, plugins included.
+- CLI-978: piped `list` names each skill on its own line, with its scope.
+- CLI-954: `uninstall`'s panel names a kept global copy and a local-marketplace plugin by name, where it printed the id.
+- CLI-960: `uninstall`'s panel header names the marketplace of what it removes, or of what it keeps when it removes no skill.
+- CLI-973: the line naming what a sub-agent gains or loses under `edit --from`'s panel names each skill as the panel does.
+- CLI-975: `edit --from` asks the plugin host once, not twice, when a skill changes both mode and scope.
+- CLI-946: a 404 or 403 from the version check stops `init --from` and `edit --from` with exit 1, leaving everything as it was.
+- CLI-958: they stop on every 4xx but 405; on a 5xx or 405 they keep the saved copy and warn once a run.
+- CLI-962: `compile`, `search`, `eject` and `uninstall` keep the saved copy over a refusal, warning on a 5xx or 405 only.
+- CLI-966: offline with only giget's saved tarball left, every load but `doctor`'s warns that it is using the cached copy.
+- CLI-931: every command prints one line to stderr for each place holding an old `.claude-src/`: it is ignored, and which folder agents-inc reads.
+- CLI-965: that line names `.agents-inc/codex/` for a root whose installation is Codex.
+- CLI-967: on a run given `--provider`, that line names that provider's folder.
+- CLI-968: a run no longer inherits the provider an earlier run in the same process named.
+- CLI-977: without `--provider`, HOME's line names HOME's folder for the project's tool.
+- CLI-969: a bare `list` under a HOME holding one installation no longer says it "holds 1 installations".
+- CLI-964: the findings check gives the same verdict in a clean `git archive` as in a checkout, so publishing needs no extra files copied in.
+- CLI-980: `generate:types:check` without the skills checkout stops with one line naming the folder it looked in.
+- CLI-947: the summary panel's scrolling code is gone; its output is unchanged.
+- CLI-948: `clean-code-standards.md` 15.19 says how to ask a library that can answer from its own cache which it did.
+- CLI-949: the editor's preview crossing spec gets a row setting both sources for the model.
+- CLI-950: doctor's row patterns in the e2e specs are built once, by `doctorRow`.
+- CLI-951: a spec that counts a rate limiter stubs it and pins the callers its key separates and merges.
+- CLI-952: the editor standard says to ask which saved configuration was read, never the stored marketplace choice.
+- CLI-953: the stack-switch question's cost is covered with a restore waiting and with a shared link open.
+- CLI-955: the resize specs wait for the settled frame instead of reading it once after a delay.
+- CLI-956: every path, URL, id and mirrored text in a spec's pattern goes through one tested escaper, `matchedAsWritten`.
+- CLI-961: the test fixtures write each skill's real display name, so specs assert names where the CLI prints names.
+- CLI-974: eleven `edit --from` plugin specs check what each run left behind, not only what it printed.
+- CLI-976: the compile and `init --from` spec files check what each run left behind.
+- EDITOR-103: an account's saved stack that fails to load with nothing unsaved says `Couldn't load this stack.`, with Retry.
+- EDITOR-104: that click and its Retry read through the account store, so the stack's tile lights and no false "discarding" is shown.
+- EDITOR-108: while an account's stack list cannot be read, `Couldn't load your saved stacks.` shows with Retry, and the grid shows this browser's saves.
+- EDITOR-106: a list that could not be read no longer counts as an empty account, so no save is carried in again.
+- EDITOR-110: a Retry that works hands keyboard focus to the stack it loaded or to the Stacks grid.
+- EDITOR-101: pressing the skill option already in effect saves nothing and reports nothing.
+- EDITOR-105: applying a stack already in effect saves nothing and reports nothing.
+- EDITOR-107: "already in effect" is judged by value, whatever the key order.
+- EDITOR-102: a "nothing saved" test checks both that the state is unchanged and that nothing was written.
+- EDITOR-109: every editor store action is filed by what a second identical call does, checked by a census spec.
+- EDITOR-85: the owed-save dialog, Escape in a skill's options panel and Apply on a proposal put keyboard focus where it was.
+- CLI-979: known gap. When `edit --from` at home drops a skill whose plugin came from another marketplace, the plugin stays installed. The fix waits on the owner's card `q-cli-979-fix`.
+- CLI-971: known gap. A project config that declares nothing, under a HOME holding both tools, is counted as an installation by the refusal and `list`, while commands skip it. The fix is queued.
+- CLI-982: known gap. `init --from` that cannot write the project's config leaves a half-install. Waiting on the owner's card `q-cli-init-half-install`.
+
+See [changelogs/0.174.0.md](./changelogs/0.174.0.md) for full details.
+
+## [0.173.0] - 2026-10-23
+
+**`doctor` downloads each marketplace on every run, the editor keeps a saved configuration per marketplace and its stack-switch question waits for the stack, and a sub-agent goes off with its last skill**
+
+- REPO-44:
+  - The editor keeps a saved configuration per marketplace: loading another opens its own and leaves the one on screen saved with its marketplace, and a saved stack built on another marketplace loads that marketplace first.
+  - The question before an account's saved stack replaces changes waits for the stack and offers Retry when it cannot load. A sub-agent whose last skill goes switches off with the toast on a link the CLI minted.
+  - `doctor` passes a project holding a Claude and a Codex installation, and `doctor` and `uninstall` use the project's own provider's global where a home holds both. A marketplace skill with no `displayName` is skipped with a warning and the rest of the marketplace loads.
+- CLI-925: `doctor` downloads each marketplace on every run, fails its row when only giget's saved tarball came back, and says when it replaced a saved copy that differed.
+- CLI-915: the editor's preview shows a link's own description over its stack's, as the install does.
+- CLI-865: the panel and terminal-poll specs wait for their settled result instead of sampling once after a fixed delay.
+
+See [changelogs/0.173.0.md](./changelogs/0.173.0.md) for full details.
+
 ## [0.172.0] - 2026-10-22
 
 **`init --from`, `edit --from` and `uninstall` show the summary panel at the question, the editor names the sub-agents a skill switches and holds a project link's global entries, links are version 7, and agentsinc.sh/ opens the editor**

package/dist/{chunk-6LUTY35Q.js → chunk-3PJZ4QNJ.js}

@@ -4,13 +4,13 @@ import {
   arrivedAsText,
   jsonBodyOrUndefined,
   retryAfterSeconds
-} from "./chunk-A3ZAXL5T.js";
+} from "./chunk-QCX66KBM.js";
 import {
   withoutExcludedAssignments
-} from "./chunk-LUKDDHSI.js";
+} from "./chunk-EFXVYQGT.js";
 import {
   readCarriedSkills
-} from "./chunk-7ZOWSCAO.js";
+} from "./chunk-IAQFZFWD.js";
 import {
   ERROR_MESSAGES,
   directoryExists,
@@ -21,13 +21,13 @@ import {
   loadProjectConfigFromDir,
   readForkedFromMetadata,
   resolveInstallPaths
-} from "./chunk-VILFCMRN.js";
+} from "./chunk-E45IT3HC.js";
 import {
   plural,
   truncateText,
   typedEntries,
   typedValues
-} from "./chunk-7OG635DK.js";
+} from "./chunk-AIBVAYHS.js";
 import {
   CLI_INVOKE_COMMAND,
   DEFAULT_PUBLIC_SOURCE_NAME,
@@ -38,7 +38,7 @@ import {
   activeAgentScopeMap,
   activeSkillScopeMap,
   seedModelSchema
-} from "./chunk-MHAQWMNJ.js";
+} from "./chunk-WUSEZFER.js";
 
 // src/cli/lib/seed/installation-payload.ts
 import os from "os";
@@ -371,4 +371,4 @@ export {
   skillsAuthoredHere,
   publishSeedConfig
 };
-//# sourceMappingURL=chunk-6LUTY35Q.js.map
+//# sourceMappingURL=chunk-3PJZ4QNJ.js.map

package/dist/{chunk-255DGUCH.js → chunk-6PGXTLA4.js}

@@ -14,7 +14,7 @@ import {
   readFileOptional,
   unexpressibleOnCodexMessage,
   writeFile
-} from "./chunk-VILFCMRN.js";
+} from "./chunk-E45IT3HC.js";
 
 // src/cli/lib/hosts/claude-project-trust.ts
 import path from "path";
@@ -226,13 +226,19 @@ async function holdsProjectRoles(projectDir) {
 
 // src/cli/lib/hosts/host-compile-notices.ts
 async function hostCompileNotices(provider, projectDir) {
-  return [
-    ...await codexCompileNotices(provider, projectDir),
-    ...await claudeCompileNotices(provider, projectDir)
-  ];
+  switch (provider) {
+    case "claude":
+      return claudeCompileNotices(provider, projectDir);
+    case "codex":
+      return codexCompileNotices(provider, projectDir);
+    default: {
+      const _exhaustive = provider;
+      return _exhaustive;
+    }
+  }
 }
 
 export {
   hostCompileNotices
 };
-//# sourceMappingURL=chunk-255DGUCH.js.map
+//# sourceMappingURL=chunk-6PGXTLA4.js.map

package/dist/{chunk-255DGUCH.js.map → chunk-6PGXTLA4.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli/lib/hosts/claude-project-trust.ts","../src/cli/lib/hosts/codex-project-trust.ts","../src/cli/lib/hosts/codex-compile-notices.ts","../src/cli/lib/hosts/host-compile-notices.ts"],"sourcesContent":["import path from \"path\";\nimport { realpath } from \"fs/promises\";\n\nimport { z } from \"zod\";\n\nimport { agentCodec, agentsDir, claudeStateFile } from \"../installation/install-layout.js\";\nimport { isHomeDirectory } from \"../installation/is-home-directory.js\";\nimport { fileExists, glob, readFile, readFileOptional } from \"../../utils/fs.js\";\nimport { extractFrontmatter } from \"../../utils/frontmatter.js\";\nimport type { Provider } from \"../../consts.js\";\n\n/**\n * Warns when Claude Code will drop a project sub-agent's hooks, on every event: project hooks run\n * only once `~/.claude.json` records `projects[<key>].hasTrustDialogAccepted`, keyed by the git\n * repository root (a linked worktree's main checkout). Reads that state, never writes it.\n */\n\nconst claudeStateSchema = z.object({ projects: z.record(z.string(), z.unknown()) });\n\nconst trustedProjectSchema = z.object({ hasTrustDialogAccepted: z.literal(true) });\n\n/** Claude Code reads only a top-level `hooks:` key: event name to its definitions. */\nconst declaredHooksSchema = z.object({ hooks: z.record(z.string(), z.array(z.unknown())) });\n\nconst GIT_ENTRY = \".git\";\nconst GITDIR_PREFIX = \"gitdir:\";\nconst COMMONDIR_FILE = \"commondir\";\nconst BACK_LINK_FILE = \"gitdir\";\nconst WORKTREES_DIR = \"worktrees\";\n\n/** \"never asks\": a folder above is trusted, so no prompt appears and only the record can fix it. */\ntype ClaudeTrust =\n  | { readonly kind: \"trusted\" }\n  | { readonly kind: \"asks\" }\n  | { readonly kind: \"never asks\"; readonly recordKey: string };\n\ntype TrustRecord = (folder: string) => boolean;\n\n/** Empty from the home directory: `~/.claude/agents/` is trusted unconditionally. */\nexport async function claudeCompileNotices(\n  provider: Provider,\n  projectDir: string,\n): Promise<string[]> {\n  if (provider !== \"claude\") return [];\n  if (isHomeDirectory(projectDir)) return [];\n\n  const agentsWithHooks = await countProjectAgentsDeclaringHooks(projectDir);\n  if (agentsWithHooks === 0) return [];\n\n  const trust = await claudeTrustOf(projectDir);\n  switch (trust.kind) {\n    case \"trusted\":\n      return [];\n    case \"asks\":\n      return [claudeProjectNeedsTrustMessage(projectDir, agentsWithHooks)];\n    case \"never asks\":\n      return [claudeProjectNeverAskedMessage(trust.recordKey, agentsWithHooks)];\n    default: {\n      const _exhaustive: never = trust;\n      return _exhaustive;\n    }\n  }\n}\n\nexport function claudeProjectNeedsTrustMessage(projectDir: string, count: number): string {\n  return (\n    `Claude Code runs a project sub-agent's hooks only once you trust the folder: open Claude ` +\n    `Code in ${projectDir} and accept the trust prompt. Until then, ${hooksOf(count)} will not ` +\n    `run, and nothing will say so.`\n  );\n}\n\nexport function claudeProjectNeverAskedMessage(recordKey: string, count: number): string {\n  return (\n    `Claude Code runs ${hooksOf(count)} only once you trust the folder, and will not ask here: ` +\n    `set projects[${JSON.stringify(recordKey)}].hasTrustDialogAccepted to true in ` +\n    `${claudeStateFile()}.`\n  );\n}\n\nfunction hooksOf(count: number): string {\n  return count === 1 ? \"1 sub-agent's hooks\" : `${count} sub-agents' hooks`;\n}\n\nasync function claudeTrustOf(projectDir: string): Promise<ClaudeTrust> {\n  const [isTrusted, repositoryRoot] = await Promise.all([\n    trustRecord(),\n    gitRepositoryRoot(projectDir),\n  ]);\n  const recordKey =\n    repositoryRoot === undefined ? projectDir : await canonicalRepositoryRoot(repositoryRoot);\n  if (isTrusted(recordKey)) return { kind: \"trusted\" };\n\n  const promptSuppressed = foldersUpTo(projectDir, repositoryRoot).some(isTrusted);\n  return promptSuppressed ? { kind: \"never asks\", recordKey } : { kind: \"asks\" };\n}\n\n/** Unreadable counts as untrusted: a wrong \"untrusted\" costs one line of advice. */\nasync function trustRecord(): Promise<TrustRecord> {\n  const stateFile = claudeStateFile();\n  if (!(await fileExists(stateFile))) return () => false;\n\n  const state = claudeStateSchema.safeParse(parsedOrUndefined(await readFile(stateFile)));\n  if (!state.success) return () => false;\n\n  const { projects } = state.data;\n  return (folder) => trustedProjectSchema.safeParse(projects[folder]).success;\n}\n\nfunction parsedOrUndefined(json: string): unknown {\n  try {\n    return JSON.parse(json);\n  } catch {\n    return undefined;\n  }\n}\n\nfunction foldersUpTo(folder: string, top?: string): string[] {\n  const parent = path.dirname(folder);\n  if (folder === top || parent === folder) return [folder];\n  return [folder, ...foldersUpTo(parent, top)];\n}\n\nasync function gitRepositoryRoot(folder: string): Promise<string | undefined> {\n  const candidates = foldersUpTo(folder);\n  const holdsGit = await Promise.all(\n    candidates.map((candidate) => fileExists(path.join(candidate, GIT_ENTRY))),\n  );\n  return candidates.find((_, index) => holdsGit[index]);\n}\n\n/**\n * A linked worktree (`.git` file pointing into `<main>/.git/worktrees/`, which points back) is\n * keyed by its main checkout; anything else by `root` itself.\n */\nasync function canonicalRepositoryRoot(root: string): Promise<string> {\n  // A `.git` directory reads as empty, as a missing file does.\n  const pointer = (await readFileOptional(path.join(root, GIT_ENTRY))).trim();\n  if (!pointer.startsWith(GITDIR_PREFIX)) return root;\n\n  const gitDir = path.resolve(root, pointer.slice(GITDIR_PREFIX.length).trim());\n  const [commonDir, backLink] = await Promise.all([\n    pathRecordedIn(gitDir, COMMONDIR_FILE),\n    pathRecordedIn(gitDir, BACK_LINK_FILE),\n  ]);\n  const isLinkedWorktree =\n    path.dirname(gitDir) === path.join(commonDir, WORKTREES_DIR) &&\n    (await pointsBackAt(backLink, root));\n  if (!isLinkedWorktree) return root;\n\n  // A worktree of a bare repository is keyed by the bare repository's own folder.\n  return path.basename(commonDir) === GIT_ENTRY ? path.dirname(commonDir) : commonDir;\n}\n\nasync function pathRecordedIn(dir: string, file: string): Promise<string> {\n  return path.resolve(dir, (await readFileOptional(path.join(dir, file))).trim());\n}\n\nasync function pointsBackAt(backLink: string, root: string): Promise<boolean> {\n  const [linked, realRoot] = await Promise.all([\n    realpathOrUndefined(backLink),\n    realpathOrUndefined(root),\n  ]);\n  return realRoot !== undefined && linked === path.join(realRoot, GIT_ENTRY);\n}\n\nasync function realpathOrUndefined(file: string): Promise<string | undefined> {\n  try {\n    return await realpath(file);\n  } catch {\n    return undefined;\n  }\n}\n\nasync function countProjectAgentsDeclaringHooks(projectDir: string): Promise<number> {\n  const dir = agentsDir(\"claude\", \"project\", projectDir);\n  const files = await glob(agentCodec(\"claude\").listGlob, dir);\n  const agents = await Promise.all(files.map((file) => readFile(path.join(dir, file))));\n  return agents.filter(declaresAHook).length;\n}\n\n/** An event with no definition runs nothing, so it is not a hook to warn about. */\nfunction declaresAHook(agentMarkdown: string): boolean {\n  const frontmatter = declaredHooksSchema.safeParse(extractFrontmatter(agentMarkdown));\n  return (\n    frontmatter.success &&\n    Object.values(frontmatter.data.hooks).some((definitions) => definitions.length > 0)\n  );\n}\n","import path from \"path\";\n\nimport { codexGlobalConfigFile } from \"../installation/install-layout.js\";\nimport { ensureDir, fileExists, readFile, writeFile } from \"../../utils/fs.js\";\n\n/**\n * Codex reads `<project>/.codex/agents/*.toml` only while the GLOBAL `config.toml` holds\n * `[projects.\"<abs path>\"] trust_level = \"trusted\"`, failing silently otherwise. The install writes\n * that entry and says so, but never overrides a level the user already set.\n */\n\nconst TRUST_KEY = \"trust_level\";\nconst TRUSTED = \"trusted\";\nconst TRUST_ASSIGNMENT = `${TRUST_KEY} = \"${TRUSTED}\"`;\n\nexport type CodexProjectTrust =\n  | { readonly kind: \"already trusted\" }\n  | { readonly kind: \"trusted now\"; readonly configFile: string }\n  | {\n      readonly kind: \"left as the user set it\";\n      readonly configFile: string;\n      readonly level: string;\n    };\n\n/**\n * Merged into the user's file, never rewritten: a second table for the same path would make Codex\n * refuse the whole file. `path.resolve` gives the one spelling Codex matches (no trailing slash).\n */\nexport async function trustCodexProject(projectDir: string): Promise<CodexProjectTrust> {\n  const configFile = codexGlobalConfigFile();\n  const dir = path.resolve(projectDir);\n  const config = (await fileExists(configFile)) ? await readFile(configFile) : \"\";\n\n  if (declaresTrust(config, dir)) return { kind: \"already trusted\" };\n\n  const level = declaredLevel(config, dir);\n  if (level !== undefined) return { kind: \"left as the user set it\", configFile, level };\n\n  await ensureDir(path.dirname(configFile));\n  await writeFile(configFile, withTrustFor(config, dir));\n  return { kind: \"trusted now\", configFile };\n}\n\nexport function codexProjectTrustMessage(\n  projectDir: string,\n  trust: CodexProjectTrust,\n): string | undefined {\n  const table = projectTableHeader(path.resolve(projectDir));\n\n  switch (trust.kind) {\n    case \"already trusted\":\n      return undefined;\n    case \"trusted now\":\n      return (\n        `Trusted this project in your Codex configuration, so Codex reads its sub-agents: added ` +\n        `${table} with ${TRUST_KEY} = \"${TRUSTED}\" to ${trust.configFile}.`\n      );\n    case \"left as the user set it\":\n      return (\n        `Codex reads this project's sub-agents only once it is trusted, and ${trust.configFile} ` +\n        `sets ${TRUST_KEY} = \"${trust.level}\" under ${table}. Left as you set it — change it to ` +\n        `\"${TRUSTED}\" for Codex to read them.`\n      );\n    default: {\n      const _exhaustive: never = trust;\n      return _exhaustive;\n    }\n  }\n}\n\n/** Hand-read, not TOML-parsed; any other spelling reads as untrusted, the safe direction. */\nfunction declaresTrust(config: string, projectDir: string): boolean {\n  return linesForProject(config, projectDir).includes(TRUST_ASSIGNMENT);\n}\n\nconst TRUST_LEVEL_LINE = new RegExp(`^${TRUST_KEY}\\\\s*=\\\\s*\"([^\"]*)\"$`);\n\n/** The user's own `trust_level` for this project, which is never overwritten. */\nfunction declaredLevel(config: string, projectDir: string): string | undefined {\n  return linesForProject(config, projectDir)\n    .map((line) => TRUST_LEVEL_LINE.exec(line)?.[1])\n    .find((level) => level !== undefined);\n}\n\n/** Trimmed: the lines under the project's table header, then its dotted keys with the prefix cut. */\nfunction linesForProject(config: string, projectDir: string): string[] {\n  const lines = config.split(\"\\n\").map((line) => line.trim());\n  const dottedPrefix = `projects.\"${projectDir}\".`;\n  const dotted = lines\n    .filter((line) => line.startsWith(dottedPrefix))\n    .map((line) => line.slice(dottedPrefix.length));\n\n  return [...linesUnderProjectTable(lines, projectDir), ...dotted];\n}\n\nfunction linesUnderProjectTable(lines: readonly string[], projectDir: string): readonly string[] {\n  const header = lines.indexOf(projectTableHeader(projectDir));\n  if (header === -1) return [];\n\n  const after = lines.slice(header + 1);\n  const nextTable = after.findIndex(opensATable);\n  return nextTable === -1 ? after : after.slice(0, nextTable);\n}\n\nfunction opensATable(line: string): boolean {\n  return line.startsWith(\"[\");\n}\n\nfunction projectTableHeader(projectDir: string): string {\n  return `[projects.\"${projectDir}\"]`;\n}\n\nfunction withTrustFor(config: string, projectDir: string): string {\n  const lines = config.split(\"\\n\");\n  const header = lines.findIndex((line) => line.trim() === projectTableHeader(projectDir));\n\n  if (header !== -1) {\n    return [...lines.slice(0, header + 1), TRUST_ASSIGNMENT, ...lines.slice(header + 1)].join(\"\\n\");\n  }\n\n  const theirs = config.trimEnd();\n  const table = `${projectTableHeader(projectDir)}\\n${TRUST_ASSIGNMENT}\\n`;\n  return theirs === \"\" ? table : `${theirs}\\n\\n${table}`;\n}\n","import {\n  agentsLeftOutOfCodexMessage,\n  unexpressibleOnCodexMessage,\n} from \"@workspace/compile/agent-source\";\n\nimport { codexProjectTrustMessage, trustCodexProject } from \"./codex-project-trust.js\";\nimport { agentCodec, agentsDir } from \"../installation/install-layout.js\";\nimport { glob } from \"../../utils/fs.js\";\nimport type { Provider } from \"../../consts.js\";\n\n/** Once per run, not per sub-agent or scope: each notice is true of the whole installation. */\nexport async function codexCompileNotices(\n  provider: Provider,\n  projectDir: string,\n): Promise<string[]> {\n  if (provider !== \"codex\") return [];\n\n  return [\n    agentsLeftOutOfCodexMessage(),\n    unexpressibleOnCodexMessage(),\n    ...(await trustNotice(projectDir)),\n  ];\n}\n\n/** Only when role files exist: trusting a project with nothing for Codex to read grants nothing. */\nasync function trustNotice(projectDir: string): Promise<string[]> {\n  if (!(await holdsProjectRoles(projectDir))) return [];\n\n  const said = codexProjectTrustMessage(projectDir, await trustCodexProject(projectDir));\n  return said === undefined ? [] : [said];\n}\n\nasync function holdsProjectRoles(projectDir: string): Promise<boolean> {\n  const roles = await glob(agentCodec(\"codex\").listGlob, agentsDir(\"codex\", \"project\", projectDir));\n\n  return roles.length > 0;\n}\n","import { claudeCompileNotices } from \"./claude-project-trust.js\";\nimport { codexCompileNotices } from \"./codex-compile-notices.js\";\nimport type { Provider } from \"../../consts.js\";\n\n/** The one source `init` and `compile` share, so they cannot say different things. */\nexport async function hostCompileNotices(\n  provider: Provider,\n  projectDir: string,\n): Promise<string[]> {\n  return [\n    ...(await codexCompileNotices(provider, projectDir)),\n    ...(await claudeCompileNotices(provider, projectDir)),\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,OAAO,UAAU;AACjB,SAAS,gBAAgB;AAEzB,SAAS,SAAS;AAclB,IAAM,oBAAoB,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;AAElF,IAAM,uBAAuB,EAAE,OAAO,EAAE,wBAAwB,EAAE,QAAQ,IAAI,EAAE,CAAC;AAGjF,IAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;AAE1F,IAAM,YAAY;AAClB,IAAM,gBAAgB;AACtB,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,gBAAgB;AAWtB,eAAsB,qBACpB,UACA,YACmB;AACnB,MAAI,aAAa,SAAU,QAAO,CAAC;AACnC,MAAI,gBAAgB,UAAU,EAAG,QAAO,CAAC;AAEzC,QAAM,kBAAkB,MAAM,iCAAiC,UAAU;AACzE,MAAI,oBAAoB,EAAG,QAAO,CAAC;AAEnC,QAAM,QAAQ,MAAM,cAAc,UAAU;AAC5C,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO,CAAC;AAAA,IACV,KAAK;AACH,aAAO,CAAC,+BAA+B,YAAY,eAAe,CAAC;AAAA,IACrE,KAAK;AACH,aAAO,CAAC,+BAA+B,MAAM,WAAW,eAAe,CAAC;AAAA,IAC1E,SAAS;AACP,YAAM,cAAqB;AAC3B,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEO,SAAS,+BAA+B,YAAoB,OAAuB;AACxF,SACE,oGACW,UAAU,6CAA6C,QAAQ,KAAK,CAAC;AAGpF;AAEO,SAAS,+BAA+B,WAAmB,OAAuB;AACvF,SACE,oBAAoB,QAAQ,KAAK,CAAC,wEAClB,KAAK,UAAU,SAAS,CAAC,uCACtC,gBAAgB,CAAC;AAExB;AAEA,SAAS,QAAQ,OAAuB;AACtC,SAAO,UAAU,IAAI,wBAAwB,GAAG,KAAK;AACvD;AAEA,eAAe,cAAc,YAA0C;AACrE,QAAM,CAAC,WAAW,cAAc,IAAI,MAAM,QAAQ,IAAI;AAAA,IACpD,YAAY;AAAA,IACZ,kBAAkB,UAAU;AAAA,EAC9B,CAAC;AACD,QAAM,YACJ,mBAAmB,SAAY,aAAa,MAAM,wBAAwB,cAAc;AAC1F,MAAI,UAAU,SAAS,EAAG,QAAO,EAAE,MAAM,UAAU;AAEnD,QAAM,mBAAmB,YAAY,YAAY,cAAc,EAAE,KAAK,SAAS;AAC/E,SAAO,mBAAmB,EAAE,MAAM,cAAc,UAAU,IAAI,EAAE,MAAM,OAAO;AAC/E;AAGA,eAAe,cAAoC;AACjD,QAAM,YAAY,gBAAgB;AAClC,MAAI,CAAE,MAAM,WAAW,SAAS,EAAI,QAAO,MAAM;AAEjD,QAAM,QAAQ,kBAAkB,UAAU,kBAAkB,MAAM,SAAS,SAAS,CAAC,CAAC;AACtF,MAAI,CAAC,MAAM,QAAS,QAAO,MAAM;AAEjC,QAAM,EAAE,SAAS,IAAI,MAAM;AAC3B,SAAO,CAAC,WAAW,qBAAqB,UAAU,SAAS,MAAM,CAAC,EAAE;AACtE;AAEA,SAAS,kBAAkB,MAAuB;AAChD,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAY,QAAgB,KAAwB;AAC3D,QAAM,SAAS,KAAK,QAAQ,MAAM;AAClC,MAAI,WAAW,OAAO,WAAW,OAAQ,QAAO,CAAC,MAAM;AACvD,SAAO,CAAC,QAAQ,GAAG,YAAY,QAAQ,GAAG,CAAC;AAC7C;AAEA,eAAe,kBAAkB,QAA6C;AAC5E,QAAM,aAAa,YAAY,MAAM;AACrC,QAAM,WAAW,MAAM,QAAQ;AAAA,IAC7B,WAAW,IAAI,CAAC,cAAc,WAAW,KAAK,KAAK,WAAW,SAAS,CAAC,CAAC;AAAA,EAC3E;AACA,SAAO,WAAW,KAAK,CAAC,GAAG,UAAU,SAAS,KAAK,CAAC;AACtD;AAMA,eAAe,wBAAwB,MAA+B;AAEpE,QAAM,WAAW,MAAM,iBAAiB,KAAK,KAAK,MAAM,SAAS,CAAC,GAAG,KAAK;AAC1E,MAAI,CAAC,QAAQ,WAAW,aAAa,EAAG,QAAO;AAE/C,QAAM,SAAS,KAAK,QAAQ,MAAM,QAAQ,MAAM,cAAc,MAAM,EAAE,KAAK,CAAC;AAC5E,QAAM,CAAC,WAAW,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC9C,eAAe,QAAQ,cAAc;AAAA,IACrC,eAAe,QAAQ,cAAc;AAAA,EACvC,CAAC;AACD,QAAM,mBACJ,KAAK,QAAQ,MAAM,MAAM,KAAK,KAAK,WAAW,aAAa,KAC1D,MAAM,aAAa,UAAU,IAAI;AACpC,MAAI,CAAC,iBAAkB,QAAO;AAG9B,SAAO,KAAK,SAAS,SAAS,MAAM,YAAY,KAAK,QAAQ,SAAS,IAAI;AAC5E;AAEA,eAAe,eAAe,KAAa,MAA+B;AACxE,SAAO,KAAK,QAAQ,MAAM,MAAM,iBAAiB,KAAK,KAAK,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC;AAChF;AAEA,eAAe,aAAa,UAAkB,MAAgC;AAC5E,QAAM,CAAC,QAAQ,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC3C,oBAAoB,QAAQ;AAAA,IAC5B,oBAAoB,IAAI;AAAA,EAC1B,CAAC;AACD,SAAO,aAAa,UAAa,WAAW,KAAK,KAAK,UAAU,SAAS;AAC3E;AAEA,eAAe,oBAAoB,MAA2C;AAC5E,MAAI;AACF,WAAO,MAAM,SAAS,IAAI;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iCAAiC,YAAqC;AACnF,QAAM,MAAM,UAAU,UAAU,WAAW,UAAU;AACrD,QAAM,QAAQ,MAAM,KAAK,WAAW,QAAQ,EAAE,UAAU,GAAG;AAC3D,QAAM,SAAS,MAAM,QAAQ,IAAI,MAAM,IAAI,CAAC,SAAS,SAAS,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC;AACpF,SAAO,OAAO,OAAO,aAAa,EAAE;AACtC;AAGA,SAAS,cAAc,eAAgC;AACrD,QAAM,cAAc,oBAAoB,UAAU,mBAAmB,aAAa,CAAC;AACnF,SACE,YAAY,WACZ,OAAO,OAAO,YAAY,KAAK,KAAK,EAAE,KAAK,CAAC,gBAAgB,YAAY,SAAS,CAAC;AAEtF;;;AC5LA,OAAOA,WAAU;AAWjB,IAAM,YAAY;AAClB,IAAM,UAAU;AAChB,IAAM,mBAAmB,GAAG,SAAS,OAAO,OAAO;AAenD,eAAsB,kBAAkB,YAAgD;AACtF,QAAM,aAAa,sBAAsB;AACzC,QAAM,MAAMC,MAAK,QAAQ,UAAU;AACnC,QAAM,SAAU,MAAM,WAAW,UAAU,IAAK,MAAM,SAAS,UAAU,IAAI;AAE7E,MAAI,cAAc,QAAQ,GAAG,EAAG,QAAO,EAAE,MAAM,kBAAkB;AAEjE,QAAM,QAAQ,cAAc,QAAQ,GAAG;AACvC,MAAI,UAAU,OAAW,QAAO,EAAE,MAAM,2BAA2B,YAAY,MAAM;AAErF,QAAM,UAAUA,MAAK,QAAQ,UAAU,CAAC;AACxC,QAAM,UAAU,YAAY,aAAa,QAAQ,GAAG,CAAC;AACrD,SAAO,EAAE,MAAM,eAAe,WAAW;AAC3C;AAEO,SAAS,yBACd,YACA,OACoB;AACpB,QAAM,QAAQ,mBAAmBA,MAAK,QAAQ,UAAU,CAAC;AAEzD,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aACE,0FACG,KAAK,SAAS,SAAS,OAAO,OAAO,QAAQ,MAAM,UAAU;AAAA,IAEpE,KAAK;AACH,aACE,sEAAsE,MAAM,UAAU,SAC9E,SAAS,OAAO,MAAM,KAAK,WAAW,KAAK,6CAC/C,OAAO;AAAA,IAEf,SAAS;AACP,YAAM,cAAqB;AAC3B,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAGA,SAAS,cAAc,QAAgB,YAA6B;AAClE,SAAO,gBAAgB,QAAQ,UAAU,EAAE,SAAS,gBAAgB;AACtE;AAEA,IAAM,mBAAmB,IAAI,OAAO,IAAI,SAAS,qBAAqB;AAGtE,SAAS,cAAc,QAAgB,YAAwC;AAC7E,SAAO,gBAAgB,QAAQ,UAAU,EACtC,IAAI,CAAC,SAAS,iBAAiB,KAAK,IAAI,IAAI,CAAC,CAAC,EAC9C,KAAK,CAAC,UAAU,UAAU,MAAS;AACxC;AAGA,SAAS,gBAAgB,QAAgB,YAA8B;AACrE,QAAM,QAAQ,OAAO,MAAM,IAAI,EAAE,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;AAC1D,QAAM,eAAe,aAAa,UAAU;AAC5C,QAAM,SAAS,MACZ,OAAO,CAAC,SAAS,KAAK,WAAW,YAAY,CAAC,EAC9C,IAAI,CAAC,SAAS,KAAK,MAAM,aAAa,MAAM,CAAC;AAEhD,SAAO,CAAC,GAAG,uBAAuB,OAAO,UAAU,GAAG,GAAG,MAAM;AACjE;AAEA,SAAS,uBAAuB,OAA0B,YAAuC;AAC/F,QAAM,SAAS,MAAM,QAAQ,mBAAmB,UAAU,CAAC;AAC3D,MAAI,WAAW,GAAI,QAAO,CAAC;AAE3B,QAAM,QAAQ,MAAM,MAAM,SAAS,CAAC;AACpC,QAAM,YAAY,MAAM,UAAU,WAAW;AAC7C,SAAO,cAAc,KAAK,QAAQ,MAAM,MAAM,GAAG,SAAS;AAC5D;AAEA,SAAS,YAAY,MAAuB;AAC1C,SAAO,KAAK,WAAW,GAAG;AAC5B;AAEA,SAAS,mBAAmB,YAA4B;AACtD,SAAO,cAAc,UAAU;AACjC;AAEA,SAAS,aAAa,QAAgB,YAA4B;AAChE,QAAM,QAAQ,OAAO,MAAM,IAAI;AAC/B,QAAM,SAAS,MAAM,UAAU,CAAC,SAAS,KAAK,KAAK,MAAM,mBAAmB,UAAU,CAAC;AAEvF,MAAI,WAAW,IAAI;AACjB,WAAO,CAAC,GAAG,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,kBAAkB,GAAG,MAAM,MAAM,SAAS,CAAC,CAAC,EAAE,KAAK,IAAI;AAAA,EAChG;AAEA,QAAM,SAAS,OAAO,QAAQ;AAC9B,QAAM,QAAQ,GAAG,mBAAmB,UAAU,CAAC;AAAA,EAAK,gBAAgB;AAAA;AACpE,SAAO,WAAW,KAAK,QAAQ,GAAG,MAAM;AAAA;AAAA,EAAO,KAAK;AACtD;;;AChHA,eAAsB,oBACpB,UACA,YACmB;AACnB,MAAI,aAAa,QAAS,QAAO,CAAC;AAElC,SAAO;AAAA,IACL,4BAA4B;AAAA,IAC5B,4BAA4B;AAAA,IAC5B,GAAI,MAAM,YAAY,UAAU;AAAA,EAClC;AACF;AAGA,eAAe,YAAY,YAAuC;AAChE,MAAI,CAAE,MAAM,kBAAkB,UAAU,EAAI,QAAO,CAAC;AAEpD,QAAM,OAAO,yBAAyB,YAAY,MAAM,kBAAkB,UAAU,CAAC;AACrF,SAAO,SAAS,SAAY,CAAC,IAAI,CAAC,IAAI;AACxC;AAEA,eAAe,kBAAkB,YAAsC;AACrE,QAAM,QAAQ,MAAM,KAAK,WAAW,OAAO,EAAE,UAAU,UAAU,SAAS,WAAW,UAAU,CAAC;AAEhG,SAAO,MAAM,SAAS;AACxB;;;AC/BA,eAAsB,mBACpB,UACA,YACmB;AACnB,SAAO;AAAA,IACL,GAAI,MAAM,oBAAoB,UAAU,UAAU;AAAA,IAClD,GAAI,MAAM,qBAAqB,UAAU,UAAU;AAAA,EACrD;AACF;","names":["path","path"]}
+{"version":3,"sources":["../src/cli/lib/hosts/claude-project-trust.ts","../src/cli/lib/hosts/codex-project-trust.ts","../src/cli/lib/hosts/codex-compile-notices.ts","../src/cli/lib/hosts/host-compile-notices.ts"],"sourcesContent":["import path from \"path\";\nimport { realpath } from \"fs/promises\";\n\nimport { z } from \"zod\";\n\nimport { agentCodec, agentsDir, claudeStateFile } from \"../installation/install-layout.js\";\nimport { isHomeDirectory } from \"../installation/is-home-directory.js\";\nimport { fileExists, glob, readFile, readFileOptional } from \"../../utils/fs.js\";\nimport { extractFrontmatter } from \"../../utils/frontmatter.js\";\nimport type { Provider } from \"../../consts.js\";\n\n/**\n * Warns when Claude Code will drop a project sub-agent's hooks, on every event: project hooks run\n * only once `~/.claude.json` records `projects[<key>].hasTrustDialogAccepted`, keyed by the git\n * repository root (a linked worktree's main checkout). Reads that state, never writes it.\n */\n\nconst claudeStateSchema = z.object({ projects: z.record(z.string(), z.unknown()) });\n\nconst trustedProjectSchema = z.object({ hasTrustDialogAccepted: z.literal(true) });\n\n/** Claude Code reads only a top-level `hooks:` key: event name to its definitions. */\nconst declaredHooksSchema = z.object({ hooks: z.record(z.string(), z.array(z.unknown())) });\n\nconst GIT_ENTRY = \".git\";\nconst GITDIR_PREFIX = \"gitdir:\";\nconst COMMONDIR_FILE = \"commondir\";\nconst BACK_LINK_FILE = \"gitdir\";\nconst WORKTREES_DIR = \"worktrees\";\n\n/** \"never asks\": a folder above is trusted, so no prompt appears and only the record can fix it. */\ntype ClaudeTrust =\n  | { readonly kind: \"trusted\" }\n  | { readonly kind: \"asks\" }\n  | { readonly kind: \"never asks\"; readonly recordKey: string };\n\ntype TrustRecord = (folder: string) => boolean;\n\n/** Empty from the home directory: `~/.claude/agents/` is trusted unconditionally. */\nexport async function claudeCompileNotices(\n  provider: Provider,\n  projectDir: string,\n): Promise<string[]> {\n  if (provider !== \"claude\") return [];\n  if (isHomeDirectory(projectDir)) return [];\n\n  const agentsWithHooks = await countProjectAgentsDeclaringHooks(projectDir);\n  if (agentsWithHooks === 0) return [];\n\n  const trust = await claudeTrustOf(projectDir);\n  switch (trust.kind) {\n    case \"trusted\":\n      return [];\n    case \"asks\":\n      return [claudeProjectNeedsTrustMessage(projectDir, agentsWithHooks)];\n    case \"never asks\":\n      return [claudeProjectNeverAskedMessage(trust.recordKey, agentsWithHooks)];\n    default: {\n      const _exhaustive: never = trust;\n      return _exhaustive;\n    }\n  }\n}\n\nexport function claudeProjectNeedsTrustMessage(projectDir: string, count: number): string {\n  return (\n    `Claude Code runs a project sub-agent's hooks only once you trust the folder: open Claude ` +\n    `Code in ${projectDir} and accept the trust prompt. Until then, ${hooksOf(count)} will not ` +\n    `run, and nothing will say so.`\n  );\n}\n\nexport function claudeProjectNeverAskedMessage(recordKey: string, count: number): string {\n  return (\n    `Claude Code runs ${hooksOf(count)} only once you trust the folder, and will not ask here: ` +\n    `set projects[${JSON.stringify(recordKey)}].hasTrustDialogAccepted to true in ` +\n    `${claudeStateFile()}.`\n  );\n}\n\nfunction hooksOf(count: number): string {\n  return count === 1 ? \"1 sub-agent's hooks\" : `${count} sub-agents' hooks`;\n}\n\nasync function claudeTrustOf(projectDir: string): Promise<ClaudeTrust> {\n  const [isTrusted, repositoryRoot] = await Promise.all([\n    trustRecord(),\n    gitRepositoryRoot(projectDir),\n  ]);\n  const recordKey =\n    repositoryRoot === undefined ? projectDir : await canonicalRepositoryRoot(repositoryRoot);\n  if (isTrusted(recordKey)) return { kind: \"trusted\" };\n\n  const promptSuppressed = foldersUpTo(projectDir, repositoryRoot).some(isTrusted);\n  return promptSuppressed ? { kind: \"never asks\", recordKey } : { kind: \"asks\" };\n}\n\n/** Unreadable counts as untrusted: a wrong \"untrusted\" costs one line of advice. */\nasync function trustRecord(): Promise<TrustRecord> {\n  const stateFile = claudeStateFile();\n  if (!(await fileExists(stateFile))) return () => false;\n\n  const state = claudeStateSchema.safeParse(parsedOrUndefined(await readFile(stateFile)));\n  if (!state.success) return () => false;\n\n  const { projects } = state.data;\n  return (folder) => trustedProjectSchema.safeParse(projects[folder]).success;\n}\n\nfunction parsedOrUndefined(json: string): unknown {\n  try {\n    return JSON.parse(json);\n  } catch {\n    return undefined;\n  }\n}\n\nfunction foldersUpTo(folder: string, top?: string): string[] {\n  const parent = path.dirname(folder);\n  if (folder === top || parent === folder) return [folder];\n  return [folder, ...foldersUpTo(parent, top)];\n}\n\nasync function gitRepositoryRoot(folder: string): Promise<string | undefined> {\n  const candidates = foldersUpTo(folder);\n  const holdsGit = await Promise.all(\n    candidates.map((candidate) => fileExists(path.join(candidate, GIT_ENTRY))),\n  );\n  return candidates.find((_, index) => holdsGit[index]);\n}\n\n/**\n * A linked worktree (`.git` file pointing into `<main>/.git/worktrees/`, which points back) is\n * keyed by its main checkout; anything else by `root` itself.\n */\nasync function canonicalRepositoryRoot(root: string): Promise<string> {\n  // A `.git` directory reads as empty, as a missing file does.\n  const pointer = (await readFileOptional(path.join(root, GIT_ENTRY))).trim();\n  if (!pointer.startsWith(GITDIR_PREFIX)) return root;\n\n  const gitDir = path.resolve(root, pointer.slice(GITDIR_PREFIX.length).trim());\n  const [commonDir, backLink] = await Promise.all([\n    pathRecordedIn(gitDir, COMMONDIR_FILE),\n    pathRecordedIn(gitDir, BACK_LINK_FILE),\n  ]);\n  const isLinkedWorktree =\n    path.dirname(gitDir) === path.join(commonDir, WORKTREES_DIR) &&\n    (await pointsBackAt(backLink, root));\n  if (!isLinkedWorktree) return root;\n\n  // A worktree of a bare repository is keyed by the bare repository's own folder.\n  return path.basename(commonDir) === GIT_ENTRY ? path.dirname(commonDir) : commonDir;\n}\n\nasync function pathRecordedIn(dir: string, file: string): Promise<string> {\n  return path.resolve(dir, (await readFileOptional(path.join(dir, file))).trim());\n}\n\nasync function pointsBackAt(backLink: string, root: string): Promise<boolean> {\n  const [linked, realRoot] = await Promise.all([\n    realpathOrUndefined(backLink),\n    realpathOrUndefined(root),\n  ]);\n  return realRoot !== undefined && linked === path.join(realRoot, GIT_ENTRY);\n}\n\nasync function realpathOrUndefined(file: string): Promise<string | undefined> {\n  try {\n    return await realpath(file);\n  } catch {\n    return undefined;\n  }\n}\n\nasync function countProjectAgentsDeclaringHooks(projectDir: string): Promise<number> {\n  const dir = agentsDir(\"claude\", \"project\", projectDir);\n  const files = await glob(agentCodec(\"claude\").listGlob, dir);\n  const agents = await Promise.all(files.map((file) => readFile(path.join(dir, file))));\n  return agents.filter(declaresAHook).length;\n}\n\n/** An event with no definition runs nothing, so it is not a hook to warn about. */\nfunction declaresAHook(agentMarkdown: string): boolean {\n  const frontmatter = declaredHooksSchema.safeParse(extractFrontmatter(agentMarkdown));\n  return (\n    frontmatter.success &&\n    Object.values(frontmatter.data.hooks).some((definitions) => definitions.length > 0)\n  );\n}\n","import path from \"path\";\n\nimport { codexGlobalConfigFile } from \"../installation/install-layout.js\";\nimport { ensureDir, fileExists, readFile, writeFile } from \"../../utils/fs.js\";\n\n/**\n * Codex reads `<project>/.codex/agents/*.toml` only while the GLOBAL `config.toml` holds\n * `[projects.\"<abs path>\"] trust_level = \"trusted\"`, failing silently otherwise. The install writes\n * that entry and says so, but never overrides a level the user already set.\n */\n\nconst TRUST_KEY = \"trust_level\";\nconst TRUSTED = \"trusted\";\nconst TRUST_ASSIGNMENT = `${TRUST_KEY} = \"${TRUSTED}\"`;\n\nexport type CodexProjectTrust =\n  | { readonly kind: \"already trusted\" }\n  | { readonly kind: \"trusted now\"; readonly configFile: string }\n  | {\n      readonly kind: \"left as the user set it\";\n      readonly configFile: string;\n      readonly level: string;\n    };\n\n/**\n * Merged into the user's file, never rewritten: a second table for the same path would make Codex\n * refuse the whole file. `path.resolve` gives the one spelling Codex matches (no trailing slash).\n */\nexport async function trustCodexProject(projectDir: string): Promise<CodexProjectTrust> {\n  const configFile = codexGlobalConfigFile();\n  const dir = path.resolve(projectDir);\n  const config = (await fileExists(configFile)) ? await readFile(configFile) : \"\";\n\n  if (declaresTrust(config, dir)) return { kind: \"already trusted\" };\n\n  const level = declaredLevel(config, dir);\n  if (level !== undefined) return { kind: \"left as the user set it\", configFile, level };\n\n  await ensureDir(path.dirname(configFile));\n  await writeFile(configFile, withTrustFor(config, dir));\n  return { kind: \"trusted now\", configFile };\n}\n\nexport function codexProjectTrustMessage(\n  projectDir: string,\n  trust: CodexProjectTrust,\n): string | undefined {\n  const table = projectTableHeader(path.resolve(projectDir));\n\n  switch (trust.kind) {\n    case \"already trusted\":\n      return undefined;\n    case \"trusted now\":\n      return (\n        `Trusted this project in your Codex configuration, so Codex reads its sub-agents: added ` +\n        `${table} with ${TRUST_KEY} = \"${TRUSTED}\" to ${trust.configFile}.`\n      );\n    case \"left as the user set it\":\n      return (\n        `Codex reads this project's sub-agents only once it is trusted, and ${trust.configFile} ` +\n        `sets ${TRUST_KEY} = \"${trust.level}\" under ${table}. Left as you set it — change it to ` +\n        `\"${TRUSTED}\" for Codex to read them.`\n      );\n    default: {\n      const _exhaustive: never = trust;\n      return _exhaustive;\n    }\n  }\n}\n\n/** Hand-read, not TOML-parsed; any other spelling reads as untrusted, the safe direction. */\nfunction declaresTrust(config: string, projectDir: string): boolean {\n  return linesForProject(config, projectDir).includes(TRUST_ASSIGNMENT);\n}\n\nconst TRUST_LEVEL_LINE = new RegExp(`^${TRUST_KEY}\\\\s*=\\\\s*\"([^\"]*)\"$`);\n\n/** The user's own `trust_level` for this project, which is never overwritten. */\nfunction declaredLevel(config: string, projectDir: string): string | undefined {\n  return linesForProject(config, projectDir)\n    .map((line) => TRUST_LEVEL_LINE.exec(line)?.[1])\n    .find((level) => level !== undefined);\n}\n\n/** Trimmed: the lines under the project's table header, then its dotted keys with the prefix cut. */\nfunction linesForProject(config: string, projectDir: string): string[] {\n  const lines = config.split(\"\\n\").map((line) => line.trim());\n  const dottedPrefix = `projects.\"${projectDir}\".`;\n  const dotted = lines\n    .filter((line) => line.startsWith(dottedPrefix))\n    .map((line) => line.slice(dottedPrefix.length));\n\n  return [...linesUnderProjectTable(lines, projectDir), ...dotted];\n}\n\nfunction linesUnderProjectTable(lines: readonly string[], projectDir: string): readonly string[] {\n  const header = lines.indexOf(projectTableHeader(projectDir));\n  if (header === -1) return [];\n\n  const after = lines.slice(header + 1);\n  const nextTable = after.findIndex(opensATable);\n  return nextTable === -1 ? after : after.slice(0, nextTable);\n}\n\nfunction opensATable(line: string): boolean {\n  return line.startsWith(\"[\");\n}\n\nfunction projectTableHeader(projectDir: string): string {\n  return `[projects.\"${projectDir}\"]`;\n}\n\nfunction withTrustFor(config: string, projectDir: string): string {\n  const lines = config.split(\"\\n\");\n  const header = lines.findIndex((line) => line.trim() === projectTableHeader(projectDir));\n\n  if (header !== -1) {\n    return [...lines.slice(0, header + 1), TRUST_ASSIGNMENT, ...lines.slice(header + 1)].join(\"\\n\");\n  }\n\n  const theirs = config.trimEnd();\n  const table = `${projectTableHeader(projectDir)}\\n${TRUST_ASSIGNMENT}\\n`;\n  return theirs === \"\" ? table : `${theirs}\\n\\n${table}`;\n}\n","import {\n  agentsLeftOutOfCodexMessage,\n  unexpressibleOnCodexMessage,\n} from \"@workspace/compile/agent-source\";\n\nimport { codexProjectTrustMessage, trustCodexProject } from \"./codex-project-trust.js\";\nimport { agentCodec, agentsDir } from \"../installation/install-layout.js\";\nimport { glob } from \"../../utils/fs.js\";\nimport type { Provider } from \"../../consts.js\";\n\n/** Once per run, not per sub-agent or scope: each notice is true of the whole installation. */\nexport async function codexCompileNotices(\n  provider: Provider,\n  projectDir: string,\n): Promise<string[]> {\n  if (provider !== \"codex\") return [];\n\n  return [\n    agentsLeftOutOfCodexMessage(),\n    unexpressibleOnCodexMessage(),\n    ...(await trustNotice(projectDir)),\n  ];\n}\n\n/** Only when role files exist: trusting a project with nothing for Codex to read grants nothing. */\nasync function trustNotice(projectDir: string): Promise<string[]> {\n  if (!(await holdsProjectRoles(projectDir))) return [];\n\n  const said = codexProjectTrustMessage(projectDir, await trustCodexProject(projectDir));\n  return said === undefined ? [] : [said];\n}\n\nasync function holdsProjectRoles(projectDir: string): Promise<boolean> {\n  const roles = await glob(agentCodec(\"codex\").listGlob, agentsDir(\"codex\", \"project\", projectDir));\n\n  return roles.length > 0;\n}\n","import { claudeCompileNotices } from \"./claude-project-trust.js\";\nimport { codexCompileNotices } from \"./codex-compile-notices.js\";\nimport type { Provider } from \"../../consts.js\";\n\n/** The one source `init` and `compile` share, so they cannot say different things. */\nexport async function hostCompileNotices(\n  provider: Provider,\n  projectDir: string,\n): Promise<string[]> {\n  switch (provider) {\n    case \"claude\":\n      return claudeCompileNotices(provider, projectDir);\n    case \"codex\":\n      return codexCompileNotices(provider, projectDir);\n    default: {\n      const _exhaustive: never = provider;\n      return _exhaustive;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,OAAO,UAAU;AACjB,SAAS,gBAAgB;AAEzB,SAAS,SAAS;AAclB,IAAM,oBAAoB,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;AAElF,IAAM,uBAAuB,EAAE,OAAO,EAAE,wBAAwB,EAAE,QAAQ,IAAI,EAAE,CAAC;AAGjF,IAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;AAE1F,IAAM,YAAY;AAClB,IAAM,gBAAgB;AACtB,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,gBAAgB;AAWtB,eAAsB,qBACpB,UACA,YACmB;AACnB,MAAI,aAAa,SAAU,QAAO,CAAC;AACnC,MAAI,gBAAgB,UAAU,EAAG,QAAO,CAAC;AAEzC,QAAM,kBAAkB,MAAM,iCAAiC,UAAU;AACzE,MAAI,oBAAoB,EAAG,QAAO,CAAC;AAEnC,QAAM,QAAQ,MAAM,cAAc,UAAU;AAC5C,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO,CAAC;AAAA,IACV,KAAK;AACH,aAAO,CAAC,+BAA+B,YAAY,eAAe,CAAC;AAAA,IACrE,KAAK;AACH,aAAO,CAAC,+BAA+B,MAAM,WAAW,eAAe,CAAC;AAAA,IAC1E,SAAS;AACP,YAAM,cAAqB;AAC3B,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEO,SAAS,+BAA+B,YAAoB,OAAuB;AACxF,SACE,oGACW,UAAU,6CAA6C,QAAQ,KAAK,CAAC;AAGpF;AAEO,SAAS,+BAA+B,WAAmB,OAAuB;AACvF,SACE,oBAAoB,QAAQ,KAAK,CAAC,wEAClB,KAAK,UAAU,SAAS,CAAC,uCACtC,gBAAgB,CAAC;AAExB;AAEA,SAAS,QAAQ,OAAuB;AACtC,SAAO,UAAU,IAAI,wBAAwB,GAAG,KAAK;AACvD;AAEA,eAAe,cAAc,YAA0C;AACrE,QAAM,CAAC,WAAW,cAAc,IAAI,MAAM,QAAQ,IAAI;AAAA,IACpD,YAAY;AAAA,IACZ,kBAAkB,UAAU;AAAA,EAC9B,CAAC;AACD,QAAM,YACJ,mBAAmB,SAAY,aAAa,MAAM,wBAAwB,cAAc;AAC1F,MAAI,UAAU,SAAS,EAAG,QAAO,EAAE,MAAM,UAAU;AAEnD,QAAM,mBAAmB,YAAY,YAAY,cAAc,EAAE,KAAK,SAAS;AAC/E,SAAO,mBAAmB,EAAE,MAAM,cAAc,UAAU,IAAI,EAAE,MAAM,OAAO;AAC/E;AAGA,eAAe,cAAoC;AACjD,QAAM,YAAY,gBAAgB;AAClC,MAAI,CAAE,MAAM,WAAW,SAAS,EAAI,QAAO,MAAM;AAEjD,QAAM,QAAQ,kBAAkB,UAAU,kBAAkB,MAAM,SAAS,SAAS,CAAC,CAAC;AACtF,MAAI,CAAC,MAAM,QAAS,QAAO,MAAM;AAEjC,QAAM,EAAE,SAAS,IAAI,MAAM;AAC3B,SAAO,CAAC,WAAW,qBAAqB,UAAU,SAAS,MAAM,CAAC,EAAE;AACtE;AAEA,SAAS,kBAAkB,MAAuB;AAChD,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAY,QAAgB,KAAwB;AAC3D,QAAM,SAAS,KAAK,QAAQ,MAAM;AAClC,MAAI,WAAW,OAAO,WAAW,OAAQ,QAAO,CAAC,MAAM;AACvD,SAAO,CAAC,QAAQ,GAAG,YAAY,QAAQ,GAAG,CAAC;AAC7C;AAEA,eAAe,kBAAkB,QAA6C;AAC5E,QAAM,aAAa,YAAY,MAAM;AACrC,QAAM,WAAW,MAAM,QAAQ;AAAA,IAC7B,WAAW,IAAI,CAAC,cAAc,WAAW,KAAK,KAAK,WAAW,SAAS,CAAC,CAAC;AAAA,EAC3E;AACA,SAAO,WAAW,KAAK,CAAC,GAAG,UAAU,SAAS,KAAK,CAAC;AACtD;AAMA,eAAe,wBAAwB,MAA+B;AAEpE,QAAM,WAAW,MAAM,iBAAiB,KAAK,KAAK,MAAM,SAAS,CAAC,GAAG,KAAK;AAC1E,MAAI,CAAC,QAAQ,WAAW,aAAa,EAAG,QAAO;AAE/C,QAAM,SAAS,KAAK,QAAQ,MAAM,QAAQ,MAAM,cAAc,MAAM,EAAE,KAAK,CAAC;AAC5E,QAAM,CAAC,WAAW,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC9C,eAAe,QAAQ,cAAc;AAAA,IACrC,eAAe,QAAQ,cAAc;AAAA,EACvC,CAAC;AACD,QAAM,mBACJ,KAAK,QAAQ,MAAM,MAAM,KAAK,KAAK,WAAW,aAAa,KAC1D,MAAM,aAAa,UAAU,IAAI;AACpC,MAAI,CAAC,iBAAkB,QAAO;AAG9B,SAAO,KAAK,SAAS,SAAS,MAAM,YAAY,KAAK,QAAQ,SAAS,IAAI;AAC5E;AAEA,eAAe,eAAe,KAAa,MAA+B;AACxE,SAAO,KAAK,QAAQ,MAAM,MAAM,iBAAiB,KAAK,KAAK,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC;AAChF;AAEA,eAAe,aAAa,UAAkB,MAAgC;AAC5E,QAAM,CAAC,QAAQ,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC3C,oBAAoB,QAAQ;AAAA,IAC5B,oBAAoB,IAAI;AAAA,EAC1B,CAAC;AACD,SAAO,aAAa,UAAa,WAAW,KAAK,KAAK,UAAU,SAAS;AAC3E;AAEA,eAAe,oBAAoB,MAA2C;AAC5E,MAAI;AACF,WAAO,MAAM,SAAS,IAAI;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iCAAiC,YAAqC;AACnF,QAAM,MAAM,UAAU,UAAU,WAAW,UAAU;AACrD,QAAM,QAAQ,MAAM,KAAK,WAAW,QAAQ,EAAE,UAAU,GAAG;AAC3D,QAAM,SAAS,MAAM,QAAQ,IAAI,MAAM,IAAI,CAAC,SAAS,SAAS,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC;AACpF,SAAO,OAAO,OAAO,aAAa,EAAE;AACtC;AAGA,SAAS,cAAc,eAAgC;AACrD,QAAM,cAAc,oBAAoB,UAAU,mBAAmB,aAAa,CAAC;AACnF,SACE,YAAY,WACZ,OAAO,OAAO,YAAY,KAAK,KAAK,EAAE,KAAK,CAAC,gBAAgB,YAAY,SAAS,CAAC;AAEtF;;;AC5LA,OAAOA,WAAU;AAWjB,IAAM,YAAY;AAClB,IAAM,UAAU;AAChB,IAAM,mBAAmB,GAAG,SAAS,OAAO,OAAO;AAenD,eAAsB,kBAAkB,YAAgD;AACtF,QAAM,aAAa,sBAAsB;AACzC,QAAM,MAAMC,MAAK,QAAQ,UAAU;AACnC,QAAM,SAAU,MAAM,WAAW,UAAU,IAAK,MAAM,SAAS,UAAU,IAAI;AAE7E,MAAI,cAAc,QAAQ,GAAG,EAAG,QAAO,EAAE,MAAM,kBAAkB;AAEjE,QAAM,QAAQ,cAAc,QAAQ,GAAG;AACvC,MAAI,UAAU,OAAW,QAAO,EAAE,MAAM,2BAA2B,YAAY,MAAM;AAErF,QAAM,UAAUA,MAAK,QAAQ,UAAU,CAAC;AACxC,QAAM,UAAU,YAAY,aAAa,QAAQ,GAAG,CAAC;AACrD,SAAO,EAAE,MAAM,eAAe,WAAW;AAC3C;AAEO,SAAS,yBACd,YACA,OACoB;AACpB,QAAM,QAAQ,mBAAmBA,MAAK,QAAQ,UAAU,CAAC;AAEzD,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aACE,0FACG,KAAK,SAAS,SAAS,OAAO,OAAO,QAAQ,MAAM,UAAU;AAAA,IAEpE,KAAK;AACH,aACE,sEAAsE,MAAM,UAAU,SAC9E,SAAS,OAAO,MAAM,KAAK,WAAW,KAAK,6CAC/C,OAAO;AAAA,IAEf,SAAS;AACP,YAAM,cAAqB;AAC3B,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAGA,SAAS,cAAc,QAAgB,YAA6B;AAClE,SAAO,gBAAgB,QAAQ,UAAU,EAAE,SAAS,gBAAgB;AACtE;AAEA,IAAM,mBAAmB,IAAI,OAAO,IAAI,SAAS,qBAAqB;AAGtE,SAAS,cAAc,QAAgB,YAAwC;AAC7E,SAAO,gBAAgB,QAAQ,UAAU,EACtC,IAAI,CAAC,SAAS,iBAAiB,KAAK,IAAI,IAAI,CAAC,CAAC,EAC9C,KAAK,CAAC,UAAU,UAAU,MAAS;AACxC;AAGA,SAAS,gBAAgB,QAAgB,YAA8B;AACrE,QAAM,QAAQ,OAAO,MAAM,IAAI,EAAE,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;AAC1D,QAAM,eAAe,aAAa,UAAU;AAC5C,QAAM,SAAS,MACZ,OAAO,CAAC,SAAS,KAAK,WAAW,YAAY,CAAC,EAC9C,IAAI,CAAC,SAAS,KAAK,MAAM,aAAa,MAAM,CAAC;AAEhD,SAAO,CAAC,GAAG,uBAAuB,OAAO,UAAU,GAAG,GAAG,MAAM;AACjE;AAEA,SAAS,uBAAuB,OAA0B,YAAuC;AAC/F,QAAM,SAAS,MAAM,QAAQ,mBAAmB,UAAU,CAAC;AAC3D,MAAI,WAAW,GAAI,QAAO,CAAC;AAE3B,QAAM,QAAQ,MAAM,MAAM,SAAS,CAAC;AACpC,QAAM,YAAY,MAAM,UAAU,WAAW;AAC7C,SAAO,cAAc,KAAK,QAAQ,MAAM,MAAM,GAAG,SAAS;AAC5D;AAEA,SAAS,YAAY,MAAuB;AAC1C,SAAO,KAAK,WAAW,GAAG;AAC5B;AAEA,SAAS,mBAAmB,YAA4B;AACtD,SAAO,cAAc,UAAU;AACjC;AAEA,SAAS,aAAa,QAAgB,YAA4B;AAChE,QAAM,QAAQ,OAAO,MAAM,IAAI;AAC/B,QAAM,SAAS,MAAM,UAAU,CAAC,SAAS,KAAK,KAAK,MAAM,mBAAmB,UAAU,CAAC;AAEvF,MAAI,WAAW,IAAI;AACjB,WAAO,CAAC,GAAG,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,kBAAkB,GAAG,MAAM,MAAM,SAAS,CAAC,CAAC,EAAE,KAAK,IAAI;AAAA,EAChG;AAEA,QAAM,SAAS,OAAO,QAAQ;AAC9B,QAAM,QAAQ,GAAG,mBAAmB,UAAU,CAAC;AAAA,EAAK,gBAAgB;AAAA;AACpE,SAAO,WAAW,KAAK,QAAQ,GAAG,MAAM;AAAA;AAAA,EAAO,KAAK;AACtD;;;AChHA,eAAsB,oBACpB,UACA,YACmB;AACnB,MAAI,aAAa,QAAS,QAAO,CAAC;AAElC,SAAO;AAAA,IACL,4BAA4B;AAAA,IAC5B,4BAA4B;AAAA,IAC5B,GAAI,MAAM,YAAY,UAAU;AAAA,EAClC;AACF;AAGA,eAAe,YAAY,YAAuC;AAChE,MAAI,CAAE,MAAM,kBAAkB,UAAU,EAAI,QAAO,CAAC;AAEpD,QAAM,OAAO,yBAAyB,YAAY,MAAM,kBAAkB,UAAU,CAAC;AACrF,SAAO,SAAS,SAAY,CAAC,IAAI,CAAC,IAAI;AACxC;AAEA,eAAe,kBAAkB,YAAsC;AACrE,QAAM,QAAQ,MAAM,KAAK,WAAW,OAAO,EAAE,UAAU,UAAU,SAAS,WAAW,UAAU,CAAC;AAEhG,SAAO,MAAM,SAAS;AACxB;;;AC/BA,eAAsB,mBACpB,UACA,YACmB;AACnB,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,aAAO,qBAAqB,UAAU,UAAU;AAAA,IAClD,KAAK;AACH,aAAO,oBAAoB,UAAU,UAAU;AAAA,IACjD,SAAS;AACP,YAAM,cAAqB;AAC3B,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":["path","path"]}

package/dist/{chunk-KCLBLK3F.js → chunk-7BHDKEGK.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   getLocalAgentDefinitions
-} from "./chunk-NISWBQNS.js";
+} from "./chunk-IXVGBUWI.js";
 import {
   loadMergedAgents
-} from "./chunk-VILFCMRN.js";
+} from "./chunk-E45IT3HC.js";
 
 // src/cli/lib/operations/project/load-agent-defs.ts
 async function loadAgentDefs() {
@@ -20,4 +20,4 @@ async function loadAgentDefs() {
 export {
   loadAgentDefs
 };
-//# sourceMappingURL=chunk-KCLBLK3F.js.map
+//# sourceMappingURL=chunk-7BHDKEGK.js.map

package/dist/{chunk-7OG635DK.js → chunk-AIBVAYHS.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   seatCatalog
-} from "./chunk-MHAQWMNJ.js";
+} from "./chunk-WUSEZFER.js";
 
 // src/cli/utils/string.ts
 var OSC = /\u001B\][\s\S]*?(?:\u0007|\u001B\\|$)/;
@@ -9349,6 +9349,9 @@ function getSkillById(id) {
 function getSkillDisplayName(id) {
   return inertLine(matrix.skills[id]?.displayName ?? id);
 }
+function getSkillEntryDisplayName(entry) {
+  return entry.displayName === void 0 ? getSkillDisplayName(entry.id) : inertLine(entry.displayName);
+}
 function getCategoryDomain(category) {
   return matrix.categories[category]?.domain;
 }
@@ -9378,10 +9381,11 @@ export {
   initializeMatrix,
   getSkillById,
   getSkillDisplayName,
+  getSkillEntryDisplayName,
   getCategoryDomain,
   typedEntries,
   typedKeys,
   typedFromEntries,
   typedValues
 };
-//# sourceMappingURL=chunk-7OG635DK.js.map
+//# sourceMappingURL=chunk-AIBVAYHS.js.map