claudecode-omc 4.8.4 → 4.9.4

package/templates/hooks/pre-tool-use.mjs

@@ -7,8 +7,9 @@
 
 import * as path from 'path';
 import { dirname } from 'path';
-import { existsSync, mkdirSync, writeFileSync, renameSync } from 'fs';
+import { existsSync, mkdirSync, writeFileSync, renameSync, readFileSync } from 'fs';
 import { fileURLToPath, pathToFileURL } from 'url';
+import { homedir } from 'os';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -111,6 +112,51 @@ function writeSkillActiveState(directory, skillName, sessionId) {
   }
 }
 
+
+function clearAwaitingConfirmationFlag(directory, stateName, sessionId) {
+  const stateDir = path.join(directory, '.omc', 'state');
+  const safeSessionId = sessionId && SESSION_ID_ALLOWLIST.test(sessionId) ? sessionId : '';
+  const paths = [
+    safeSessionId ? path.join(stateDir, 'sessions', safeSessionId, `${stateName}-state.json`) : null,
+    path.join(stateDir, `${stateName}-state.json`),
+    path.join(homedir(), '.omc', 'state', `${stateName}-state.json`),
+  ].filter(Boolean);
+
+  for (const statePath of paths) {
+    try {
+      if (!existsSync(statePath)) continue;
+      const state = JSON.parse(readFileSync(statePath, 'utf-8'));
+      if (!state || typeof state !== 'object' || !state.awaiting_confirmation) continue;
+      delete state.awaiting_confirmation;
+      const tmpPath = statePath + '.tmp';
+      writeFileSync(tmpPath, JSON.stringify(state, null, 2), { mode: 0o600 });
+      renameSync(tmpPath, statePath);
+    } catch {
+      // Best-effort; don't fail the hook
+    }
+  }
+}
+
+function confirmSkillModeStates(directory, skillName, sessionId) {
+  switch (skillName) {
+    case 'ralph':
+      clearAwaitingConfirmationFlag(directory, 'ralph', sessionId);
+      clearAwaitingConfirmationFlag(directory, 'ultrawork', sessionId);
+      break;
+    case 'ultrawork':
+      clearAwaitingConfirmationFlag(directory, 'ultrawork', sessionId);
+      break;
+    case 'autopilot':
+      clearAwaitingConfirmationFlag(directory, 'autopilot', sessionId);
+      break;
+    case 'ralplan':
+      clearAwaitingConfirmationFlag(directory, 'ralplan', sessionId);
+      break;
+    default:
+      break;
+  }
+}
+
 // ---------------------------------------------------------------------------
 // Delegation enforcement
 // ---------------------------------------------------------------------------

package/templates/hooks/session-start.mjs

@@ -4,7 +4,7 @@
 // Cross-platform: Windows, macOS, Linux
 
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
-import { join, dirname } from 'path';
+import { join, dirname, normalize, resolve } from 'path';
 import { homedir } from 'os';
 import { fileURLToPath, pathToFileURL } from 'url';
 
@@ -65,14 +65,12 @@ async function checkForUpdates(currentVersion) {
   }
 
   // Fetch latest version from npm
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), 2000);
   try {
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), 2000);
-
     const response = await fetch('https://registry.npmjs.org/claudecode-omc/latest', {
       signal: controller.signal
     });
-    clearTimeout(timeoutId);
 
     if (!response.ok) {
       throw new Error('Network response was not ok');
@@ -96,12 +94,12 @@ async function checkForUpdates(currentVersion) {
   } catch (error) {
     // Silent fail - network unavailable or timeout
     return null;
-  }
+  } finally { clearTimeout(timeoutId); }
 }
 
 function compareVersions(v1, v2) {
-  const parts1 = v1.replace(/^v/, '').split('.').map(Number);
-  const parts2 = v2.replace(/^v/, '').split('.').map(Number);
+  const parts1 = v1.replace(/^v/, '').split('.').map(p => parseInt(p, 10) || 0);
+  const parts2 = v2.replace(/^v/, '').split('.').map(p => parseInt(p, 10) || 0);
 
   for (let i = 0; i < 3; i++) {
     const diff = (parts1[i] || 0) - (parts2[i] || 0);
@@ -145,7 +143,8 @@ function readNotepad(directory) {
  */
 function extractSection(content, header) {
   // Match from header to next section (## followed by space and non-# char)
-  const regex = new RegExp(`${header}\\n([\\s\\S]*?)(?=\\n## [^#]|$)`);
+  const escaped = header.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+  const regex = new RegExp(`${escaped}\\n([\\s\\S]*?)(?=\\n## [^#]|$)`);
   const match = content.match(regex);
   if (!match) {
     return null;
@@ -184,6 +183,92 @@ ${priorityContext}
 </notepad-priority>`;
 }
 
+const STALE_STATE_THRESHOLD_MS = 2 * 60 * 60 * 1000; // 2 hours
+
+function normalizePath(p) {
+  if (!p || typeof p !== 'string') return '';
+  let normalized = resolve(p);
+  normalized = normalize(normalized).replace(/[\/\\]+$/, '');
+  if (process.platform === 'win32') {
+    normalized = normalized.toLowerCase();
+  }
+  return normalized;
+}
+
+function getStateRecencyMs(state) {
+  if (!state || typeof state !== 'object') return 0;
+  const startedAt = state.started_at ? new Date(state.started_at).getTime() : 0;
+  const lastCheckedAt = state.last_checked_at ? new Date(state.last_checked_at).getTime() : 0;
+  return Math.max(startedAt || 0, lastCheckedAt || 0);
+}
+
+function isFreshActiveState(state) {
+  if (!state?.active) return false;
+  const recencyMs = getStateRecencyMs(state);
+  if (!Number.isFinite(recencyMs) || recencyMs <= 0) return false;
+  return (Date.now() - recencyMs) <= STALE_STATE_THRESHOLD_MS;
+}
+
+function hasConflictingUltraworkRestore(state, sessionId, directory, source) {
+  if (!sessionId || !isFreshActiveState(state)) return false;
+  if (typeof state.session_id !== 'string' || !state.session_id || state.session_id === sessionId) {
+    return false;
+  }
+
+  if (source === 'global') {
+    if (typeof state.project_path !== 'string' || !state.project_path) {
+      return false;
+    }
+    return normalizePath(state.project_path) === normalizePath(directory);
+  }
+
+  return true;
+}
+
+function getUltraworkRestoreCandidate(directory, sessionId) {
+  const localPath = join(directory, '.omc', 'state', 'ultrawork-state.json');
+  const globalPath = join(homedir(), '.omc', 'state', 'ultrawork-state.json');
+
+  const localState = readJsonFile(localPath);
+  if (hasConflictingUltraworkRestore(localState, sessionId, directory, 'local')) {
+    return { restore: null, collision: { source: 'local', state: localState } };
+  }
+  if (localState?.active && (!localState.session_id || localState.session_id === sessionId)) {
+    return { restore: localState, collision: null };
+  }
+
+  const globalState = readJsonFile(globalPath);
+  if (hasConflictingUltraworkRestore(globalState, sessionId, directory, 'global')) {
+    return { restore: null, collision: { source: 'global', state: globalState } };
+  }
+  if (globalState?.active && (!globalState.session_id || globalState.session_id === sessionId)) {
+    return { restore: globalState, collision: null };
+  }
+
+  return { restore: null, collision: null };
+}
+
+function formatUltraworkCollisionWarning(source, state) {
+  const startedAt = state?.started_at || 'an unknown time';
+  const ownerSession = state?.session_id || 'another session';
+  const scope = source === 'global' ? 'matching project path in the shared global fallback state' : 'this repo root';
+  return `<session-restore>
+
+[PARALLEL SESSION WARNING]
+
+Detected an active ultrawork session for ${scope}.
+Owner session: ${ownerSession}
+Started: ${startedAt}
+
+To avoid shared \.omc/state bleed across parallel sessions, OMC suppressed the restore for this session.
+Continue normally in this session, or use a separate worktree / close the other same-root session before resuming the prior ultrawork state.
+
+</session-restore>
+
+---
+`;
+}
+
 async function main() {
   try {
     const input = await readStdin();
@@ -247,11 +332,17 @@ To update, run: omc update
       }
     }
 
-    // Check for ultrawork state - only restore if session matches (issue #311)
-    const ultraworkState = readJsonFile(join(directory, '.omc', 'state', 'ultrawork-state.json'))
-      || readJsonFile(join(homedir(), '.omc', 'state', 'ultrawork-state.json'));
-
-    if (ultraworkState?.active && (!ultraworkState.session_id || ultraworkState.session_id === sessionId)) {
+    // Check for ultrawork state - warn on conflicting same-path session, otherwise restore.
+    const ultraworkCandidate = getUltraworkRestoreCandidate(directory, sessionId);
+    if (ultraworkCandidate.collision) {
+      messages.push(
+        formatUltraworkCollisionWarning(
+          ultraworkCandidate.collision.source,
+          ultraworkCandidate.collision.state,
+        ),
+      );
+    } else if (ultraworkCandidate.restore) {
+      const ultraworkState = ultraworkCandidate.restore;
       messages.push(`<session-restore>
 
 [ULTRAWORK MODE RESTORED]

package/templates/hooks/stop-continuation.mjs

@@ -2,7 +2,13 @@
 // OMC Stop Continuation Hook (Simplified)
 // Always allows stop - soft enforcement via message injection only.
 
-import { readStdin } from './lib/stdin.mjs';
+import { join, dirname } from 'path';
+import { fileURLToPath, pathToFileURL } from 'url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+const { readStdin } = await import(pathToFileURL(join(__dirname, 'lib', 'stdin.mjs')).href);
 
 async function main() {
   // Consume stdin with timeout protection (required for hook protocol)

package/dist/__tests__/codex-backoff.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=codex-backoff.test.d.ts.map

package/dist/__tests__/codex-backoff.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex-backoff.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/codex-backoff.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/codex-backoff.test.js

@@ -1,143 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
-import { computeBackoffDelay, RATE_LIMIT_RETRY_COUNT, RATE_LIMIT_INITIAL_DELAY, RATE_LIMIT_MAX_DELAY, isRetryableError, } from '../mcp/codex-core.js';
-describe('Codex Background Retry / Backoff', () => {
-    describe('RATE_LIMIT_RETRY_COUNT upper bound', () => {
-        it('should default to 3 retries', () => {
-            expect(RATE_LIMIT_RETRY_COUNT).toBe(3);
-        });
-        it('should be at least 1', () => {
-            expect(RATE_LIMIT_RETRY_COUNT).toBeGreaterThanOrEqual(1);
-        });
-        it('should be at most 10', () => {
-            expect(RATE_LIMIT_RETRY_COUNT).toBeLessThanOrEqual(10);
-        });
-    });
-    describe('computeBackoffDelay', () => {
-        beforeEach(() => {
-            vi.spyOn(Math, 'random').mockReturnValue(0.5);
-        });
-        afterEach(() => {
-            vi.restoreAllMocks();
-        });
-        it('should return initialDelay * jitter for attempt 0', () => {
-            const delay = computeBackoffDelay(0, 5000, 60000);
-            // exponential = 5000 * 2^0 = 5000
-            // capped = min(5000, 60000) = 5000
-            // jitter = 5000 * (0.5 + 0.5 * 0.5) = 5000 * 0.75 = 3750
-            expect(delay).toBe(3750);
-        });
-        it('should double delay for each attempt', () => {
-            const delay0 = computeBackoffDelay(0, 5000, 60000);
-            const delay1 = computeBackoffDelay(1, 5000, 60000);
-            const delay2 = computeBackoffDelay(2, 5000, 60000);
-            expect(delay0).toBe(3750);
-            expect(delay1).toBe(7500);
-            expect(delay2).toBe(15000);
-        });
-        it('should cap at maxDelay', () => {
-            const delay = computeBackoffDelay(5, 5000, 60000);
-            // capped = 60000, jitter = 60000 * 0.75 = 45000
-            expect(delay).toBe(45000);
-        });
-        it('should use defaults from module constants', () => {
-            const delay = computeBackoffDelay(0);
-            const expected = Math.round(RATE_LIMIT_INITIAL_DELAY * 0.75);
-            expect(delay).toBe(expected);
-        });
-        it('should always return a positive integer', () => {
-            vi.restoreAllMocks();
-            for (let attempt = 0; attempt < 10; attempt++) {
-                const delay = computeBackoffDelay(attempt, 1000, 30000);
-                expect(delay).toBeGreaterThan(0);
-                expect(Number.isInteger(delay)).toBe(true);
-            }
-        });
-    });
-    describe('explicit model retries then success', () => {
-        it('should allow retries up to RATE_LIMIT_RETRY_COUNT for explicit models', () => {
-            const maxAttempts = RATE_LIMIT_RETRY_COUNT;
-            for (let attempt = 0; attempt < maxAttempts; attempt++) {
-                expect(attempt < RATE_LIMIT_RETRY_COUNT).toBe(true);
-            }
-        });
-        it('should detect rate limit as retryable before each retry', () => {
-            const result = isRetryableError('', 'Error: 429 Too Many Requests');
-            expect(result.isError).toBe(true);
-            expect(result.type).toBe('rate_limit');
-        });
-        it('should not detect success output as retryable', () => {
-            const successOutput = JSON.stringify({ type: 'message', content: 'Analysis complete.' });
-            const result = isRetryableError(successOutput, '');
-            expect(result.isError).toBe(false);
-            expect(result.type).toBe('none');
-        });
-    });
-    describe('explicit model retries then exhaustion', () => {
-        it('should exhaust retries when attempt equals RATE_LIMIT_RETRY_COUNT', () => {
-            const exhaustedAttempt = RATE_LIMIT_RETRY_COUNT;
-            expect(exhaustedAttempt < RATE_LIMIT_RETRY_COUNT).toBe(false);
-        });
-        it('should compute increasing delays before exhaustion', () => {
-            vi.spyOn(Math, 'random').mockReturnValue(0.5);
-            const delays = [];
-            for (let attempt = 0; attempt < RATE_LIMIT_RETRY_COUNT; attempt++) {
-                delays.push(computeBackoffDelay(attempt, 5000, 60000));
-            }
-            for (let i = 1; i < delays.length; i++) {
-                expect(delays[i]).toBeGreaterThanOrEqual(delays[i - 1]);
-            }
-            vi.restoreAllMocks();
-        });
-    });
-    describe('fallback-chain switch on 429 with backoff delay', () => {
-        it('should detect rate limit errors for fallback chain decision', () => {
-            const rateLimitOutput = JSON.stringify({
-                type: 'error',
-                message: 'Rate limit exceeded. Please retry after 30 seconds.',
-            });
-            const result = isRetryableError(rateLimitOutput, '');
-            expect(result.isError).toBe(true);
-            expect(result.type).toBe('rate_limit');
-        });
-        it('should detect model errors for immediate fallback (no backoff)', () => {
-            const modelOutput = JSON.stringify({
-                type: 'error',
-                message: 'model_not_found: gpt-5.3-codex',
-            });
-            const result = isRetryableError(modelOutput, '');
-            expect(result.isError).toBe(true);
-            expect(result.type).toBe('model');
-        });
-        it('rate limit fallback should use backoff delay', () => {
-            vi.spyOn(Math, 'random').mockReturnValue(0.5);
-            const delay = computeBackoffDelay(0, RATE_LIMIT_INITIAL_DELAY, RATE_LIMIT_MAX_DELAY);
-            expect(delay).toBeGreaterThan(0);
-            expect(delay).toBeLessThanOrEqual(RATE_LIMIT_MAX_DELAY);
-            vi.restoreAllMocks();
-        });
-    });
-    describe('bounded termination', () => {
-        it('RATE_LIMIT_RETRY_COUNT provides a finite upper bound', () => {
-            expect(RATE_LIMIT_RETRY_COUNT).toBeGreaterThanOrEqual(1);
-            expect(RATE_LIMIT_RETRY_COUNT).toBeLessThanOrEqual(10);
-            expect(Number.isFinite(RATE_LIMIT_RETRY_COUNT)).toBe(true);
-        });
-        it('backoff delay is always finite and bounded by maxDelay', () => {
-            for (let attempt = 0; attempt < 100; attempt++) {
-                const delay = computeBackoffDelay(attempt, RATE_LIMIT_INITIAL_DELAY, RATE_LIMIT_MAX_DELAY);
-                expect(Number.isFinite(delay)).toBe(true);
-                expect(delay).toBeLessThanOrEqual(RATE_LIMIT_MAX_DELAY);
-                expect(delay).toBeGreaterThan(0);
-            }
-        });
-        it('total worst-case delay is bounded', () => {
-            let totalDelay = 0;
-            for (let attempt = 0; attempt < RATE_LIMIT_RETRY_COUNT; attempt++) {
-                totalDelay += computeBackoffDelay(attempt, RATE_LIMIT_INITIAL_DELAY, RATE_LIMIT_MAX_DELAY);
-            }
-            expect(Number.isFinite(totalDelay)).toBe(true);
-            expect(totalDelay).toBeLessThanOrEqual(RATE_LIMIT_RETRY_COUNT * RATE_LIMIT_MAX_DELAY);
-        });
-    });
-});
-//# sourceMappingURL=codex-backoff.test.js.map

package/dist/__tests__/codex-backoff.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex-backoff.test.js","sourceRoot":"","sources":["../../src/__tests__/codex-backoff.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAE9B,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAClD,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,CAAC,sBAAsB,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,CAAC,sBAAsB,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,UAAU,CAAC,GAAG,EAAE;YACd,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,GAAG,EAAE;YACb,EAAE,CAAC,eAAe,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAClD,kCAAkC;YAClC,mCAAmC;YACnC,yDAAyD;YACzD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAChC,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAClD,gDAAgD;YAChD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,EAAE,CAAC,eAAe,EAAE,CAAC;YACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC9C,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBACxD,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;YAC/E,MAAM,WAAW,GAAG,sBAAsB,CAAC;YAC3C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBACvD,MAAM,CAAC,OAAO,GAAG,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACtD,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;YAC3E,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;YAChD,MAAM,CAAC,gBAAgB,GAAG,sBAAsB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,sBAAsB,EAAE,OAAO,EAAE,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,EAAE,CAAC,eAAe,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC/D,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC;gBACrC,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACxE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;gBACjC,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,EAAE,wBAAwB,EAAE,oBAAoB,CAAC,CAAC;YACrF,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;YACxD,EAAE,CAAC,eAAe,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,CAAC,sBAAsB,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,CAAC,sBAAsB,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC/C,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,CAAC,CAAC;gBAC3F,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;gBACxD,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,sBAAsB,EAAE,OAAO,EAAE,EAAE,CAAC;gBAClE,UAAU,IAAI,mBAAmB,CAAC,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,CAAC,UAAU,CAAC,CAAC,mBAAmB,CAAC,sBAAsB,GAAG,oBAAoB,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/codex-callsite-normalization.test.js

@@ -1,112 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { existsSync, readFileSync, unlinkSync } from 'fs';
-
-const mockHandleAskCodex = vi.fn(async (args) => ({
-    content: [{ type: 'text', text: JSON.stringify(args) }],
-    isError: false,
-}));
-
-vi.mock('../mcp/codex-core.js', () => ({
-    handleAskCodex: mockHandleAskCodex,
-    CODEX_DEFAULT_MODEL: 'gpt-5.3-codex',
-    CODEX_RECOMMENDED_ROLES: ['architect'],
-}));
-
-vi.mock('../mcp/job-management.js', () => ({
-    handleWaitForJob: vi.fn(),
-    handleCheckJobStatus: vi.fn(),
-    handleKillJob: vi.fn(),
-    handleListJobs: vi.fn(),
-    getJobManagementToolSchemas: vi.fn(() => []),
-}));
-
-describe('Codex call-site normalization', () => {
-    beforeEach(() => {
-        vi.clearAllMocks();
-        vi.resetModules();
-    });
-
-    it('in-process codex-server normalizes background + inline into prompt_file mode', async () => {
-        vi.doMock('@anthropic-ai/claude-agent-sdk', () => ({
-            tool: vi.fn((name, _description, _schema, handler) => ({ name, handler })),
-            createSdkMcpServer: vi.fn((config) => config),
-        }));
-
-        const mod = await import('../mcp/codex-server.js');
-        const askTool = mod.codexMcpServer.tools.find((t) => t.name === 'ask_codex');
-        expect(askTool).toBeDefined();
-
-        await askTool.handler({
-            agent_role: 'architect',
-            prompt: 'ask codex to review this code',
-            background: true,
-            working_directory: '/tmp',
-        });
-
-        expect(mockHandleAskCodex).toHaveBeenCalledTimes(1);
-        const normalized = mockHandleAskCodex.mock.calls[0][0];
-        expect(normalized.prompt).toBeUndefined();
-        expect(normalized.prompt_file).toContain('codex-inline-bg-');
-        expect(normalized.output_file).toContain('codex-inline-bg-response-');
-        expect(normalized.background).toBe(true);
-        expect(existsSync(normalized.prompt_file)).toBe(true);
-        expect(readFileSync(normalized.prompt_file, 'utf-8')).toBe('ask codex to review this code');
-        unlinkSync(normalized.prompt_file);
-    });
-
-    it('standalone codex-server normalizes background + inline into prompt_file mode', async () => {
-        let serverInstance;
-        const callSchema = Symbol('call-tool');
-        const listSchema = Symbol('list-tools');
-
-        vi.doMock('@modelcontextprotocol/sdk/server/index.js', () => ({
-            Server: class MockServer {
-                constructor() {
-                    this.handlers = new Map();
-                    serverInstance = this;
-                }
-                setRequestHandler(schema, handler) {
-                    this.handlers.set(schema, handler);
-                }
-                async connect() {
-                    return;
-                }
-            },
-        }));
-        vi.doMock('@modelcontextprotocol/sdk/server/stdio.js', () => ({
-            StdioServerTransport: class MockTransport {
-            },
-        }));
-        vi.doMock('@modelcontextprotocol/sdk/types.js', () => ({
-            CallToolRequestSchema: callSchema,
-            ListToolsRequestSchema: listSchema,
-        }));
-
-        await import('../mcp/codex-standalone-server.js');
-        const handler = serverInstance.handlers.get(callSchema);
-        expect(handler).toBeDefined();
-
-        await handler({
-            params: {
-                name: 'ask_codex',
-                arguments: {
-                    agent_role: 'architect',
-                    prompt: 'delegate to codex in background',
-                    background: true,
-                    working_directory: '/tmp',
-                },
-            },
-        });
-
-        expect(mockHandleAskCodex).toHaveBeenCalledTimes(1);
-        const normalized = mockHandleAskCodex.mock.calls[0][0];
-        expect(normalized.prompt).toBeUndefined();
-        expect(normalized.prompt_file).toContain('codex-inline-bg-');
-        expect(normalized.output_file).toContain('codex-inline-bg-response-');
-        expect(normalized.background).toBe(true);
-        expect(existsSync(normalized.prompt_file)).toBe(true);
-        expect(readFileSync(normalized.prompt_file, 'utf-8')).toBe('delegate to codex in background');
-        unlinkSync(normalized.prompt_file);
-    });
-});
-

package/dist/__tests__/compatibility-security.test.d.ts

@@ -1,13 +0,0 @@
-/**
- * Security Tests for the Compatibility Layer
- *
- * Tests security fixes for:
- * - Command whitelist (arbitrary code execution prevention)
- * - Environment variable injection blocking
- * - ReDoS vulnerability prevention
- * - Path traversal prevention
- * - Schema validation
- * - Error handling
- */
-export {};
-//# sourceMappingURL=compatibility-security.test.d.ts.map

package/dist/__tests__/compatibility-security.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"compatibility-security.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/compatibility-security.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}