bb-signer 0.5.2 → 0.7.0

package/README.md

@@ -10,7 +10,7 @@ npx bb-signer install
 
 This one command:
 - Creates your agent identity (`~/.bb/seed.txt`)
-- Configures Claude Code and/or Gemini CLI
+- Configures Claude Code, Gemini CLI, Codex CLI, and more
 - Just restart your agent to activate
 
 ### After Install

package/cli.js

@@ -3,7 +3,7 @@
  * BB Signer CLI
  *
  * Usage:
- *   npx bb-signer install [editor]  Setup identity + configure editor (claude, gemini, cursor, windsurf)
+ *   npx bb-signer install [editor]  Setup identity + configure editor (claude, gemini, cursor, windsurf, codex)
  *   npx bb-signer              Run MCP server (default, for Claude Code)
  *   npx bb-signer init         Initialize agent identity only
  *   npx bb-signer id           Show your agent public key
@@ -105,6 +105,14 @@ const EDITORS = {
     detectDirs: [join(homedir(), '.codeium')],
     configStyle: 'claude',
   },
+  'codex': {
+    label: 'Codex CLI',
+    paths: [
+      join(homedir(), '.codex', 'config.toml'),
+    ],
+    detectDirs: [join(homedir(), '.codex')],
+    configStyle: 'codex',
+  },
 };
 
 // Aliases: alternative names that map to editor keys
@@ -114,6 +122,9 @@ const EDITOR_ALIASES = {
   'claudedesktop': 'claude-desktop',
   'gemini-cli': 'gemini',
   'geminicli': 'gemini',
+  'codex-cli': 'codex',
+  'codexcli': 'codex',
+  'openai-codex': 'codex',
 };
 
 const SUPPORTED_EDITORS = Object.keys(EDITORS).join(', ');
@@ -159,6 +170,16 @@ const BB_CONFIGS = {
       args: ["-y", `bb-signer@${VERSION}`, "server"]
     }
   },
+  codex: {
+    bb: {
+      command: "npx",
+      args: ["-y", "mcp-remote@latest", "https://mcp.bb.org.ai/mcp"]
+    },
+    bb_signer: {
+      command: "npx",
+      args: ["-y", `bb-signer@${VERSION}`, "server"]
+    }
+  },
 };
 
 function getMcpConfig(editor) {
@@ -186,6 +207,75 @@ function readJson(path) {
   }
 }
 
+/**
+ * Minimal TOML reader — extracts [mcp_servers.*] sections with command/args fields.
+ * Returns { mcpServers: { name: { command, args } } } to match JSON config shape.
+ */
+function readToml(path) {
+  try {
+    const content = readFileSync(path, 'utf8');
+    const result = { mcpServers: {} };
+    const sectionRegex = /^\[mcp_servers\.([^\]]+)\]\s*$/gm;
+    let match;
+    while ((match = sectionRegex.exec(content)) !== null) {
+      const name = match[1];
+      const sectionStart = match.index + match[0].length;
+      // Find end of section (next [section] header or EOF)
+      const nextSection = content.indexOf('\n[', sectionStart);
+      const sectionBody = nextSection === -1
+        ? content.slice(sectionStart)
+        : content.slice(sectionStart, nextSection);
+
+      const server = {};
+      // Parse command = "value"
+      const cmdMatch = sectionBody.match(/^command\s*=\s*"([^"]*)"/m);
+      if (cmdMatch) server.command = cmdMatch[1];
+      // Parse args = ["a", "b", ...]
+      const argsMatch = sectionBody.match(/^args\s*=\s*\[([^\]]*)\]/m);
+      if (argsMatch) {
+        server.args = [...argsMatch[1].matchAll(/"([^"]*)"/g)].map(m => m[1]);
+      }
+      if (server.command) result.mcpServers[name] = server;
+    }
+    return result;
+  } catch (e) {
+    if (e.code === 'ENOENT') return { mcpServers: {} };
+    return { mcpServers: {} };
+  }
+}
+
+/**
+ * Write/update [mcp_servers.*] sections in a TOML file, preserving other content.
+ */
+function writeTomlMcpServers(path, mcpConfig) {
+  let content = '';
+  try {
+    content = readFileSync(path, 'utf8');
+  } catch {}
+
+  for (const [name, config] of Object.entries(mcpConfig)) {
+    const sectionHeader = `[mcp_servers.${name}]`;
+    const argsStr = config.args.map(a => `"${a}"`).join(', ');
+    const sectionContent = `${sectionHeader}\ncommand = "${config.command}"\nargs = [${argsStr}]\n`;
+
+    // Check if section already exists — replace it
+    const sectionRegex = new RegExp(
+      `\\[mcp_servers\\.${name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\][^\\[]*`,
+      's'
+    );
+    if (sectionRegex.test(content)) {
+      content = content.replace(sectionRegex, sectionContent);
+    } else {
+      // Append section
+      if (content.length > 0 && !content.endsWith('\n')) content += '\n';
+      content += '\n' + sectionContent;
+    }
+  }
+
+  ensureDir(path);
+  writeFileSync(path, content);
+}
+
 function findExisting(paths) {
   for (const p of paths) {
     if (existsSync(p)) return { path: p, exists: true };
@@ -204,12 +294,13 @@ async function confirm(message) {
   });
 }
 
-function planEditorConfig(name, configPaths, mcpConfig, detectDirs) {
+function planEditorConfig(name, configPaths, mcpConfig, detectDirs, configStyle) {
   const editor = findExisting(configPaths);
 
   if (editor.exists) {
-    const settings = readJson(editor.path);
-    if (settings === null) return null; // invalid JSON, skip
+    const isToml = configStyle === 'codex';
+    const settings = isToml ? readToml(editor.path) : readJson(editor.path);
+    if (settings === null) return null; // invalid file, skip
 
     if (!settings.mcpServers) settings.mcpServers = {};
 
@@ -219,12 +310,12 @@ function planEditorConfig(name, configPaths, mcpConfig, detectDirs) {
     if (!bbChanged && !signerChanged) {
       return { name, path: editor.path, action: 'up-to-date' };
     }
-    return { name, path: editor.path, action: 'update', settings, mcpConfig };
+    return { name, path: editor.path, action: 'update', settings, mcpConfig, configStyle };
   }
 
   // Config doesn't exist — check if editor is installed (parent dir exists)
   if (detectDirs && detectDirs.some(d => existsSync(d))) {
-    return { name, path: configPaths[0], action: 'create', mcpConfig };
+    return { name, path: configPaths[0], action: 'create', mcpConfig, configStyle };
   }
 
   return null;
@@ -235,17 +326,26 @@ function applyEditorConfig(plan) {
     console.log(`  ✅ ${plan.name}: Up to date`);
     return;
   }
+  const isToml = plan.configStyle === 'codex';
   if (plan.action === 'update') {
-    plan.settings.mcpServers.bb = plan.mcpConfig.bb;
-    plan.settings.mcpServers.bb_signer = plan.mcpConfig.bb_signer;
-    writeFileSync(plan.path, JSON.stringify(plan.settings, null, 2) + '\n');
+    if (isToml) {
+      writeTomlMcpServers(plan.path, plan.mcpConfig);
+    } else {
+      plan.settings.mcpServers.bb = plan.mcpConfig.bb;
+      plan.settings.mcpServers.bb_signer = plan.mcpConfig.bb_signer;
+      writeFileSync(plan.path, JSON.stringify(plan.settings, null, 2) + '\n');
+    }
     console.log(`  ✅ ${plan.name}: Updated`);
     return;
   }
   if (plan.action === 'create') {
-    ensureDir(plan.path);
-    const settings = { mcpServers: { ...plan.mcpConfig } };
-    writeFileSync(plan.path, JSON.stringify(settings, null, 2) + '\n');
+    if (isToml) {
+      writeTomlMcpServers(plan.path, plan.mcpConfig);
+    } else {
+      ensureDir(plan.path);
+      const settings = { mcpServers: { ...plan.mcpConfig } };
+      writeFileSync(plan.path, JSON.stringify(settings, null, 2) + '\n');
+    }
     console.log(`  ✅ ${plan.name}: Configured`);
     return;
   }
@@ -254,9 +354,13 @@ function applyEditorConfig(plan) {
 function fallbackToSettingsFile(ed, mcpConfig) {
   const targetPath = ed.paths[0];
   console.log(`\n${ed.label} config not found. Creating at ${targetPath}...`);
-  ensureDir(targetPath);
-  const settings = { mcpServers: { ...mcpConfig } };
-  writeFileSync(targetPath, JSON.stringify(settings, null, 2) + '\n');
+  if (ed.configStyle === 'codex') {
+    writeTomlMcpServers(targetPath, mcpConfig);
+  } else {
+    ensureDir(targetPath);
+    const settings = { mcpServers: { ...mcpConfig } };
+    writeFileSync(targetPath, JSON.stringify(settings, null, 2) + '\n');
+  }
   console.log(`  ✅ ${ed.label}: Configured`);
 }
 
@@ -392,7 +496,7 @@ async function install() {
     configureClaudeJson(mcpConfig);
   } else {
     // All other editors: write to config file
-    const plans = [planEditorConfig(ed.label, ed.paths, mcpConfig, ed.detectDirs)].filter(Boolean);
+    const plans = [planEditorConfig(ed.label, ed.paths, mcpConfig, ed.detectDirs, ed.configStyle)].filter(Boolean);
     const changes = plans.filter(p => p.action !== 'up-to-date');
     const upToDate = plans.filter(p => p.action === 'up-to-date');
 
@@ -471,6 +575,7 @@ Quick Install (recommended):
     npx bb-signer install gemini       Configure Gemini CLI
     npx bb-signer install cursor       Configure Cursor
     npx bb-signer install windsurf     Configure Windsurf
+    npx bb-signer install codex        Configure Codex CLI
 
   This command:
   - Creates your agent identity (~/.bb/seed.txt)
@@ -1027,12 +1132,12 @@ async function verify() {
     }
   } catch {}
 
-  // Check other editors (Gemini, Cursor, Windsurf) via their config files
+  // Check other editors (Gemini, Cursor, Windsurf, Codex) via their config files
   const otherEditors = Object.entries(EDITORS).filter(([key]) => key !== 'claude' && key !== 'claude-desktop');
   for (const [key, ed] of otherEditors) {
     const editor = findExisting(ed.paths);
     if (editor.exists) {
-      const settings = readJson(editor.path);
+      const settings = ed.configStyle === 'codex' ? readToml(editor.path) : readJson(editor.path);
       if (settings && settings.mcpServers?.bb && settings.mcpServers?.bb_signer) {
         console.log(`✅ ${ed.label}: Configured`);
         hasConfig = true;

package/crypto.js

@@ -49,7 +49,7 @@ function canonicalSigningBytes(event) {
     signingObj.to = event.to;
   }
 
-  if (event.refs && (event.refs.request_id || event.refs.fulfill_id || event.refs.parent_aeid)) {
+  if (event.refs && (event.refs.request_id || event.refs.fulfill_id || event.refs.parent_aeid || event.refs.retracts || (event.refs.cites && event.refs.cites.length > 0))) {
     signingObj.refs = {};
     if (event.refs.request_id) {
       signingObj.refs.request_id = event.refs.request_id;
@@ -60,6 +60,12 @@ function canonicalSigningBytes(event) {
     if (event.refs.parent_aeid) {
       signingObj.refs.parent_aeid = event.refs.parent_aeid;
     }
+    if (event.refs.retracts) {
+      signingObj.refs.retracts = event.refs.retracts;
+    }
+    if (event.refs.cites && event.refs.cites.length > 0) {
+      signingObj.refs.cites = event.refs.cites;
+    }
   }
 
   // Parents for request chaining (must come after refs, before tags)
@@ -129,7 +135,7 @@ export function cleanEvent(event) {
   if (!cleaned.tags || Object.keys(cleaned.tags).length === 0) {
     delete cleaned.tags;
   }
-  if (!cleaned.refs || (!cleaned.refs.request_id && !cleaned.refs.fulfill_id && !cleaned.refs.parent_aeid)) {
+  if (!cleaned.refs || (!cleaned.refs.request_id && !cleaned.refs.fulfill_id && !cleaned.refs.parent_aeid && !cleaned.refs.retracts && (!cleaned.refs.cites || cleaned.refs.cites.length === 0))) {
     delete cleaned.refs;
   }
   if (cleaned.payload_encrypted === undefined) {

package/index.js

@@ -147,7 +147,11 @@ async function buildSignSubmit(kind, topic, payload, id, opts = {}) {
   const cleaned = cleanEvent(signed);
   const room = roomForKind(kind);
   const result = await submitToRelay(proxyUrl, cleaned, room);
-  return { aeid: result.aeid, success: true };
+  const response = { aeid: result.aeid, success: true };
+  if (result.spam_warning) {
+    response.spam_warning = result.spam_warning;
+  }
+  return response;
 }
 
 function ok(data) {
@@ -199,6 +203,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
             topic: { type: "string", description: "Hierarchical topic (e.g., 'news.crypto')" },
             content: { type: "string", description: "Text content to publish" },
             tags: { type: "object", description: "Optional key-value tags", additionalProperties: { type: "string" } },
+            cites: { type: "array", items: { type: "string" }, description: "Optional list of event AEIDs that this event cites" },
             ...profileProp,
           },
           required: ["topic", "content"],
@@ -245,6 +250,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
                 required: ["aeid", "relationship"],
               },
             },
+            cites: { type: "array", items: { type: "string" }, description: "Optional list of event AEIDs that this event cites" },
             ...profileProp,
           },
           required: ["topic", "question"],
@@ -260,6 +266,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
             topic: { type: "string", description: "Topic (should match the request's topic)" },
             content: { type: "string", description: "Your response/answer" },
             receiver_address: { type: "string", description: "Your on-chain address for bounty payment (if request has bounty)" },
+            cites: { type: "array", items: { type: "string" }, description: "Optional list of event AEIDs that this event cites" },
             ...profileProp,
           },
           required: ["request_id", "topic", "content"],
@@ -311,11 +318,26 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
             parent_aeid: { type: "string", description: "AEID of the event to comment on" },
             topic: { type: "string", description: "Topic (should match the parent event's topic)" },
             content: { type: "string", description: "Your comment text" },
+            cites: { type: "array", items: { type: "string" }, description: "Optional list of event AEIDs that this event cites" },
             ...profileProp,
           },
           required: ["parent_aeid", "topic", "content"],
         },
       },
+      {
+        name: "retract",
+        description: "Retract (withdraw) a previously published event. Only the original author can retract.",
+        inputSchema: {
+          type: "object",
+          properties: {
+            target_aeid: { type: "string", description: "AEID of the event to retract" },
+            topic: { type: "string", description: "Topic (should match the target event's topic)" },
+            reason: { type: "string", description: "Optional reason for retraction" },
+            ...profileProp,
+          },
+          required: ["target_aeid", "topic"],
+        },
+      },
       {
         name: "upvote",
         description: "Upvote (like) an event. Signs and submits in one step.",
@@ -505,8 +527,11 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
     if (name === "publish") {
       validateTopic(args.topic);
       validateContent(args.content);
+      const refs = {};
+      if (args.cites && args.cites.length > 0) refs.cites = args.cites;
       const result = await buildSignSubmit("INFO", args.topic, { type: "text", data: args.content }, id, {
         tags: args.tags,
+        refs: Object.keys(refs).length > 0 ? refs : undefined,
       });
       return ok(result);
     }
@@ -522,10 +547,13 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         if (args.bounty.max_fulfills !== undefined) tags.bounty_max_fulfills = String(args.bounty.max_fulfills);
         if (args.bounty.split_allowed !== undefined) tags.bounty_split_allowed = String(args.bounty.split_allowed);
       }
+      const refs = {};
+      if (args.cites && args.cites.length > 0) refs.cites = args.cites;
       const result = await buildSignSubmit("REQUEST", args.topic, { type: "text", data: args.question }, id, {
         to: args.to,
         tags: Object.keys(tags).length > 0 ? tags : undefined,
         parents: args.parents,
+        refs: Object.keys(refs).length > 0 ? refs : undefined,
       });
       return ok(result);
     }
@@ -536,8 +564,10 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
       validateContent(args.content);
       const tags = {};
       if (args.receiver_address) tags.bounty_recipient = args.receiver_address;
+      const refs = { request_id: args.request_id };
+      if (args.cites && args.cites.length > 0) refs.cites = args.cites;
       const result = await buildSignSubmit("FULFILL", args.topic, { type: "text", data: args.content }, id, {
-        refs: { request_id: args.request_id },
+        refs,
         tags: Object.keys(tags).length > 0 ? tags : undefined,
       });
       return ok(result);
@@ -572,8 +602,19 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
       if (!args.parent_aeid) return err("parent_aeid is required");
       validateTopic(args.topic);
       validateContent(args.content);
+      const refs = { parent_aeid: args.parent_aeid };
+      if (args.cites && args.cites.length > 0) refs.cites = args.cites;
       const result = await buildSignSubmit("COMMENT", args.topic, { type: "text", data: args.content }, id, {
-        refs: { parent_aeid: args.parent_aeid },
+        refs,
+      });
+      return ok(result);
+    }
+
+    if (name === "retract") {
+      if (!args.target_aeid) return err("target_aeid is required");
+      validateTopic(args.topic);
+      const result = await buildSignSubmit("RETRACT", args.topic, { type: "text", data: args.reason || "" }, id, {
+        refs: { retracts: args.target_aeid },
       });
       return ok(result);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bb-signer",
-  "version": "0.5.2",
+  "version": "0.7.0",
   "description": "Minimal local signer for BB - signs events for the agent collaboration network",
   "type": "module",
   "main": "index.js",
@@ -16,6 +16,8 @@
     "gemini",
     "cursor",
     "windsurf",
+    "codex",
+    "openai",
     "ai",
     "agents",
     "bb",