aiblueprint-cli 1.4.59 → 1.4.61

package/agents-config/claude-config/scripts/statusline/src/lib/presets.ts

@@ -21,7 +21,7 @@ const minimalConfig: StatuslineConfig = {
 	},
 	session: {
 		infoSeparator: null,
-		cost: { enabled: true, format: "decimal1" },
+		cost: { enabled: false, format: "decimal1" },
 		duration: { enabled: false },
 		tokens: { enabled: false, showMax: false, showDecimals: false },
 		percentage: {
@@ -37,7 +37,7 @@ const minimalConfig: StatuslineConfig = {
 		},
 	},
 	limits: {
-		enabled: true,
+		enabled: false,
 		showTimeLeft: false,
 		showPacingDelta: false,
 		cost: { enabled: false, format: "decimal1" },
@@ -93,7 +93,7 @@ const fullConfig: StatuslineConfig = {
 	},
 	session: {
 		infoSeparator: null,
-		cost: { enabled: true, format: "decimal2" },
+		cost: { enabled: false, format: "decimal2" },
 		duration: { enabled: true },
 		tokens: { enabled: true, showMax: true, showDecimals: true },
 		percentage: {
@@ -109,10 +109,10 @@ const fullConfig: StatuslineConfig = {
 		},
 	},
 	limits: {
-		enabled: true,
-		showTimeLeft: true,
-		showPacingDelta: true,
-		cost: { enabled: true, format: "decimal1" },
+		enabled: false,
+		showTimeLeft: false,
+		showPacingDelta: false,
+		cost: { enabled: false, format: "decimal1" },
 		percentage: {
 			enabled: true,
 			showValue: true,
@@ -126,10 +126,10 @@ const fullConfig: StatuslineConfig = {
 		},
 	},
 	weeklyUsage: {
-		enabled: true,
-		showTimeLeft: true,
-		showPacingDelta: true,
-		cost: { enabled: true, format: "decimal1" },
+		enabled: false,
+		showTimeLeft: false,
+		showPacingDelta: false,
+		cost: { enabled: false, format: "decimal1" },
 		percentage: {
 			enabled: true,
 			showValue: true,
@@ -143,7 +143,7 @@ const fullConfig: StatuslineConfig = {
 		},
 	},
 	dailySpend: {
-		cost: { enabled: true, format: "decimal1" },
+		cost: { enabled: false, format: "decimal1" },
 	},
 	context: {
 		...defaultConfig.context,
@@ -153,7 +153,7 @@ const fullConfig: StatuslineConfig = {
 export const PRESETS: Preset[] = [
 	{
 		name: "Minimal",
-		description: "Essential info only: cost, percentage, branch",
+		description: "Essential info only: percentage and branch",
 		config: minimalConfig,
 	},
 	{

package/agents-config/claude-config/scripts/statusline/src/lib/render-pure.ts

@@ -55,6 +55,7 @@ export interface RawStatuslineData {
 	};
 	periodCost?: number;
 	todayCost?: number;
+	thinkingEnabled?: boolean;
 }
 
 // Legacy interface for backwards compatibility
@@ -72,6 +73,7 @@ export interface StatuslineData {
 	};
 	periodCost?: number;
 	todayCost?: number;
+	thinkingEnabled?: boolean;
 }
 
 // ─────────────────────────────────────────────────────────────
@@ -275,12 +277,13 @@ function calculateWeeklyDelta(
 }
 
 function formatPacingDelta(delta: number): string {
-	const sign = delta >= 0 ? "+" : "";
-	const value = `${sign}${delta.toFixed(1)}%`;
+	const inverted = -delta;
+	const sign = inverted >= 0 ? "+" : "";
+	const value = `${sign}${inverted.toFixed(1)}%`;
 
-	if (delta > 5) return colors.green(value);
-	if (delta > 0) return colors.lightGray(value);
-	if (delta > -10) return colors.yellow(value);
+	if (inverted > 5) return colors.green(value);
+	if (inverted > 0) return colors.lightGray(value);
+	if (inverted > -10) return colors.yellow(value);
 	return colors.red(value);
 }
 
@@ -361,6 +364,14 @@ function formatDailyPart(
 	return `${colors.gray("D:")} ${colors.gray("$")}${colors.dimWhite(formatCost(todayCost, config.cost.format))}`;
 }
 
+function formatThinkingPart(
+	thinkingEnabled: boolean,
+	config: StatuslineConfig["thinking"],
+): string {
+	if (!config.showDisabledWarning || thinkingEnabled) return "";
+	return colors.red("Thinking: OFF");
+}
+
 // ─────────────────────────────────────────────────────────────
 // MAIN RENDER FUNCTION - Raw data + config = output
 // ─────────────────────────────────────────────────────────────
@@ -420,6 +431,13 @@ export function renderStatuslineRaw(
 	const dailyPart = formatDailyPart(data.todayCost ?? 0, config.dailySpend);
 	if (dailyPart) sections.push(dailyPart);
 
+	// Thinking warning (last position)
+	const thinkingPart = formatThinkingPart(
+		data.thinkingEnabled ?? true,
+		config.thinking,
+	);
+	if (thinkingPart) sections.push(thinkingPart);
+
 	const output = sections.join(` ${sep} `);
 
 	if (config.oneLine) return output;
@@ -451,6 +469,7 @@ export function renderStatusline(
 		usageLimits: data.usageLimits,
 		periodCost: data.periodCost,
 		todayCost: data.todayCost,
+		thinkingEnabled: data.thinkingEnabled,
 	};
 
 	return renderStatuslineRaw(rawData, config);

package/agents-config/claude-config/scripts/statusline/statusline.config.free.json

@@ -0,0 +1,79 @@
+{
+	"features": {
+		"usageLimits": false,
+		"spendTracking": false
+	},
+	"oneLine": true,
+	"showSonnetModel": false,
+	"pathDisplayMode": "truncated",
+	"git": {
+		"enabled": true,
+		"showBranch": true,
+		"showDirtyIndicator": true,
+		"showChanges": false,
+		"showStaged": true,
+		"showUnstaged": true
+	},
+	"separator": "•",
+	"session": {
+		"infoSeparator": null,
+		"cost": { "enabled": false, "format": "decimal1" },
+		"duration": { "enabled": true },
+		"tokens": { "enabled": true, "showMax": false, "showDecimals": false },
+		"percentage": {
+			"enabled": true,
+			"showValue": true,
+			"progressBar": {
+				"enabled": true,
+				"length": 10,
+				"style": "braille",
+				"color": "progressive",
+				"background": "none"
+			}
+		}
+	},
+	"context": {
+		"usePayloadContextWindow": true,
+		"maxContextTokens": 200000,
+		"autocompactBufferTokens": 45000,
+		"useUsableContextOnly": true,
+		"overheadTokens": 0
+	},
+	"limits": {
+		"enabled": false,
+		"showTimeLeft": false,
+		"showPacingDelta": false,
+		"cost": { "enabled": false, "format": "decimal1" },
+		"percentage": {
+			"enabled": false,
+			"showValue": false,
+			"progressBar": {
+				"enabled": false,
+				"length": 10,
+				"style": "braille",
+				"color": "progressive",
+				"background": "none"
+			}
+		}
+	},
+	"weeklyUsage": {
+		"enabled": false,
+		"showTimeLeft": false,
+		"showPacingDelta": false,
+		"cost": { "enabled": false, "format": "decimal1" },
+		"percentage": {
+			"enabled": false,
+			"showValue": false,
+			"progressBar": {
+				"enabled": false,
+				"length": 10,
+				"style": "braille",
+				"color": "progressive",
+				"background": "none"
+			}
+		}
+	},
+	"dailySpend": {
+		"cost": { "enabled": false, "format": "decimal1" }
+	}
+}

package/agents-config/claude-config/scripts/statusline/statusline.config.json

@@ -1,79 +1,79 @@
 {
-  "features": {
-    "usageLimits": false,
-    "spendTracking": false
-  },
-  "oneLine": true,
-  "showSonnetModel": false,
-  "pathDisplayMode": "truncated",
-  "git": {
-    "enabled": true,
-    "showBranch": true,
-    "showDirtyIndicator": true,
-    "showChanges": false,
-    "showStaged": true,
-    "showUnstaged": true
-  },
-  "separator": "•",
-  "session": {
-    "infoSeparator": null,
-    "cost": { "enabled": true, "format": "decimal1" },
-    "duration": { "enabled": true },
-    "tokens": { "enabled": true, "showMax": false, "showDecimals": false },
-    "percentage": {
-      "enabled": true,
-      "showValue": true,
-      "progressBar": {
-        "enabled": true,
-        "length": 10,
-        "style": "braille",
-        "color": "progressive",
-        "background": "none"
-      }
-    }
-  },
-  "context": {
-    "usePayloadContextWindow": true,
-    "maxContextTokens": 200000,
-    "autocompactBufferTokens": 45000,
-    "useUsableContextOnly": true,
-    "overheadTokens": 0
-  },
-  "limits": {
-    "enabled": false,
-    "showTimeLeft": false,
-    "showPacingDelta": false,
-    "cost": { "enabled": false, "format": "decimal1" },
-    "percentage": {
-      "enabled": false,
-      "showValue": false,
-      "progressBar": {
-        "enabled": false,
-        "length": 10,
-        "style": "braille",
-        "color": "progressive",
-        "background": "none"
-      }
-    }
-  },
-  "weeklyUsage": {
-    "enabled": false,
-    "showTimeLeft": false,
-    "showPacingDelta": false,
-    "cost": { "enabled": false, "format": "decimal1" },
-    "percentage": {
-      "enabled": false,
-      "showValue": false,
-      "progressBar": {
-        "enabled": false,
-        "length": 10,
-        "style": "braille",
-        "color": "progressive",
-        "background": "none"
-      }
-    }
-  },
-  "dailySpend": {
-    "cost": { "enabled": false, "format": "decimal1" }
-  }
+	"features": {
+		"usageLimits": false,
+		"spendTracking": false
+	},
+	"oneLine": true,
+	"showSonnetModel": false,
+	"pathDisplayMode": "truncated",
+	"git": {
+		"enabled": true,
+		"showBranch": true,
+		"showDirtyIndicator": true,
+		"showChanges": false,
+		"showStaged": true,
+		"showUnstaged": true
+	},
+	"separator": "•",
+	"session": {
+		"infoSeparator": null,
+		"cost": { "enabled": false, "format": "decimal1" },
+		"duration": { "enabled": true },
+		"tokens": { "enabled": true, "showMax": false, "showDecimals": false },
+		"percentage": {
+			"enabled": true,
+			"showValue": true,
+			"progressBar": {
+				"enabled": true,
+				"length": 10,
+				"style": "braille",
+				"color": "progressive",
+				"background": "none"
+			}
+		}
+	},
+	"context": {
+		"usePayloadContextWindow": true,
+		"maxContextTokens": 200000,
+		"autocompactBufferTokens": 45000,
+		"useUsableContextOnly": true,
+		"overheadTokens": 0
+	},
+	"limits": {
+		"enabled": false,
+		"showTimeLeft": false,
+		"showPacingDelta": false,
+		"cost": { "enabled": false, "format": "decimal1" },
+		"percentage": {
+			"enabled": false,
+			"showValue": false,
+			"progressBar": {
+				"enabled": false,
+				"length": 10,
+				"style": "braille",
+				"color": "progressive",
+				"background": "none"
+			}
+		}
+	},
+	"weeklyUsage": {
+		"enabled": false,
+		"showTimeLeft": false,
+		"showPacingDelta": false,
+		"cost": { "enabled": false, "format": "decimal1" },
+		"percentage": {
+			"enabled": false,
+			"showValue": false,
+			"progressBar": {
+				"enabled": false,
+				"length": 10,
+				"style": "braille",
+				"color": "progressive",
+				"background": "none"
+			}
+		}
+	},
+	"dailySpend": {
+		"cost": { "enabled": false, "format": "decimal1" }
+	}
 }

package/agents-config/codex-config/config.toml

@@ -5,6 +5,15 @@
 approval_policy = "never"
 sandbox_mode = "danger-full-access"
 
+[[hooks.PreToolUse]]
+matcher = "^Bash$"
+
+[[hooks.PreToolUse.hooks]]
+type = "command"
+command = "/usr/bin/env node \"$HOME/.codex/hooks/command-deny-list.ts\""
+timeout = 5
+statusMessage = "Checking command safety"
+
 [tui]
 status_line = [
   "model-with-reasoning",

package/agents-config/codex-config/hooks/command-deny-list.ts

@@ -0,0 +1,203 @@
+#!/usr/bin/env node
+
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+type HookPayload = {
+  tool_input?: {
+    command?: unknown;
+  };
+};
+
+type ClaudeSettings = {
+  permissions?: {
+    deny?: unknown;
+  };
+};
+
+const CLAUDE_SETTINGS_PATH = join(homedir(), ".claude", "settings.json");
+const FALLBACK_DENY_PATTERNS = [
+  "Bash(rm -rf *)",
+  "Bash(sudo *)",
+  "Bash(mkfs *)",
+  "Bash(dd *)",
+  "Bash(git push --force *)",
+  "Bash(git reset --hard *)",
+  "Bash(*prisma reset*)",
+  "Bash(curl * | bash)",
+  "Bash(wget * | bash)",
+];
+
+const BLOCK_REASON =
+  "Blocked by Codex command safety rules. Use a safer alternative or ask the user.";
+const TOKEN_BOUNDARY = String.raw`(?:^|[\s"'([{<])`;
+const GH_COMMAND_PREFIX = String.raw`(?:(?:command|builtin|env)\s+(?:[A-Za-z_][A-Za-z0-9_]*=(?:\S+)\s+)*)?`;
+const EXECUTABLE_PATH_PREFIX = String.raw`(?:\S*/)?`;
+
+function getCommand(payload: HookPayload): string {
+  const command = payload.tool_input?.command;
+  return typeof command === "string" ? command : "";
+}
+
+function readClaudeDenyPatterns(): string[] {
+  try {
+    const settings = JSON.parse(
+      readFileSync(CLAUDE_SETTINGS_PATH, "utf8"),
+    ) as ClaudeSettings;
+    const deny = settings.permissions?.deny;
+
+    if (Array.isArray(deny)) {
+      return deny.filter((pattern): pattern is string => typeof pattern === "string");
+    }
+  } catch {
+    return FALLBACK_DENY_PATTERNS;
+  }
+
+  return FALLBACK_DENY_PATTERNS;
+}
+
+function extractBashPattern(pattern: string): string | null {
+  const match = pattern.match(/^Bash\((.*)\)$/);
+  return match?.[1] ?? null;
+}
+
+function escapeRegExp(value: string): string {
+  return value.replace(/[|\\{}()[\]^$+?.]/g, "\\$&");
+}
+
+function globPatternToRegExp(pattern: string): RegExp {
+  const normalized = normalizeWhitespace(pattern);
+  const regex = normalized
+    .split("*")
+    .map(escapeRegExp)
+    .join(".*")
+    .replaceAll(" ", "\\s+");
+
+  return new RegExp(`^${regex}$`, "i");
+}
+
+function normalizeWhitespace(value: string): string {
+  return value.replace(/\\\n/g, " ").replace(/\s+/g, " ").trim();
+}
+
+function commandCandidates(command: string): string[] {
+  const normalized = normalizeWhitespace(command);
+  const segments = normalized
+    .split(/\s*(?:&&|\|\||;)\s*/g)
+    .map((segment) => segment.trim())
+    .filter(Boolean);
+
+  return [...new Set([normalized, ...segments])];
+}
+
+function containsForcedRecursiveRm(command: string): boolean {
+  const rmInvocations = normalizeWhitespace(command).matchAll(
+    /\brm\b(?<args>[^\n;&|()]*)/gi,
+  );
+
+  for (const match of rmInvocations) {
+    const args = match.groups?.args ?? "";
+    const shortOptions = [...args.matchAll(/(?<!\S)-([A-Za-z]+)\b/g)].map(
+      (optionMatch) => optionMatch[1] ?? "",
+    );
+
+    let hasRecursive = shortOptions.some((option) =>
+      option.toLowerCase().includes("r"),
+    );
+    let hasForce = shortOptions.some((option) =>
+      option.toLowerCase().includes("f"),
+    );
+
+    const longOptions = new Set(
+      [...args.matchAll(/--([A-Za-z-]+)\b/g)].map(
+        (optionMatch) => optionMatch[1] ?? "",
+      ),
+    );
+
+    hasRecursive ||= longOptions.has("recursive") || longOptions.has("dir");
+    hasForce ||= longOptions.has("force");
+
+    if (hasRecursive && hasForce) {
+      return true;
+    }
+  }
+
+  return false;
+}
+
+function containsPullRequestMergeCommand(command: string): boolean {
+  const matcher = new RegExp(
+    `${TOKEN_BOUNDARY}${GH_COMMAND_PREFIX}${EXECUTABLE_PATH_PREFIX}gh\\s+pr\\s+merge(?:\\s|$)`,
+    "i",
+  );
+
+  return commandCandidates(command).some((candidate) => matcher.test(candidate));
+}
+
+function matchesImportedDenyPattern(command: string, patterns: string[]): boolean {
+  const candidates = commandCandidates(command);
+
+  for (const pattern of patterns) {
+    const bashPattern = extractBashPattern(pattern);
+    if (!bashPattern) {
+      continue;
+    }
+
+    const matcher = globPatternToRegExp(bashPattern);
+    if (candidates.some((candidate) => matcher.test(candidate))) {
+      return true;
+    }
+  }
+
+  return false;
+}
+
+function deny(): void {
+  process.stdout.write(
+    JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: "PreToolUse",
+        permissionDecision: "deny",
+        permissionDecisionReason: BLOCK_REASON,
+      },
+      decision: "block",
+      reason: BLOCK_REASON,
+    }),
+  );
+}
+
+async function readStdin(): Promise<string> {
+  const chunks: Buffer[] = [];
+
+  for await (const chunk of process.stdin) {
+    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+  }
+
+  return Buffer.concat(chunks).toString("utf8");
+}
+
+async function main(): Promise<void> {
+  const input = await readStdin();
+  if (!input.trim()) {
+    return;
+  }
+
+  let payload: HookPayload;
+  try {
+    payload = JSON.parse(input) as HookPayload;
+  } catch {
+    return;
+  }
+
+  const command = getCommand(payload);
+  if (
+    containsForcedRecursiveRm(command) ||
+    containsPullRequestMergeCommand(command) ||
+    matchesImportedDenyPattern(command, readClaudeDenyPatterns())
+  ) {
+    deny();
+  }
+}
+
+await main();