create-merlin-brain 5.3.1 → 5.3.2

package/bin/install.cjs

@@ -1609,6 +1609,78 @@ async function install() {
     quiet: true, // step 2 already printed the detection summary
   });
 
+  // Step 13.4: Allowlist codex Bash patterns (when Codex is installed)
+  if (!process.env.MERLIN_SKIP_PERMISSIONS_PATCH) {
+    try {
+      const { execSync } = require('child_process');
+      const codexInstalledScript = path.join(SCRIPTS_DIR, 'codex-installed.sh');
+
+      // Check if Codex is installed
+      let isCodexInstalled = false;
+      try {
+        if (fs.existsSync(codexInstalledScript)) {
+          execSync(`bash ${codexInstalledScript}`, { stdio: 'pipe' });
+          isCodexInstalled = true;
+        }
+      } catch (err) {
+        // Codex not installed, skip this step
+      }
+
+      if (isCodexInstalled) {
+        const settingsPath = path.join(CLAUDE_DIR, 'settings.json');
+
+        if (fs.existsSync(settingsPath)) {
+          try {
+            const settingsContent = fs.readFileSync(settingsPath, 'utf8');
+            const settings = JSON.parse(settingsContent);
+
+            if (settings.permissions && Array.isArray(settings.permissions.allow)) {
+              const codexRules = [
+                'Bash(which *)',
+                'Bash(codex *)',
+                'Bash(codex exec *)',
+                'Bash(merlin-codex *)',
+                'Bash(~/.claude/scripts/codex-as.sh *)',
+                'Bash(bash ~/.claude/scripts/codex-as.sh *)',
+                'Bash(~/.claude/scripts/duo-codex-call.sh *)',
+                'Bash(bash ~/.claude/scripts/duo-codex-call.sh *)',
+                'Bash(~/.claude/scripts/codex-installed.sh)',
+                'Bash(~/.claude/scripts/duo-*)',
+                'Bash(bash ~/.claude/scripts/duo-*)',
+                'mcp__merlin__*'
+              ];
+
+              let addedCount = 0;
+              for (const rule of codexRules) {
+                if (!settings.permissions.allow.includes(rule)) {
+                  settings.permissions.allow.push(rule);
+                  addedCount++;
+                }
+              }
+
+              if (addedCount > 0) {
+                fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2), 'utf8');
+                logSuccess(`Allowlisted codex/duo commands in ~/.claude/settings.json (${addedCount} new rules)`);
+              } else if (process.env.MERLIN_INSTALL_VERBOSE) {
+                log(`  codex/duo Bash rules already allowlisted`);
+              }
+            } else {
+              logWarn('permissions.allow not found in ~/.claude/settings.json — skipping codex allowlist');
+            }
+          } catch (parseErr) {
+            logWarn(`Could not parse ~/.claude/settings.json — skipping codex allowlist: ${parseErr.message}`);
+          }
+        }
+        // If settings.json doesn't exist, skip silently (don't create it from scratch)
+      }
+    } catch (err) {
+      // Non-fatal: permissions patch failure does not block the installer
+      if (process.env.MERLIN_INSTALL_VERBOSE) {
+        logWarn(`Codex permissions patch skipped: ${err.message}`);
+      }
+    }
+  }
+
   // Step 13.5: Install priority design skills (async, non-blocking)
   if (!process.env.MERLIN_SKIP_DESIGN_SKILLS) {
     try {
@@ -1661,6 +1733,9 @@ ${colors.cyan}Universal Task Optimization (NEW in 5.3.0):${colors.reset}
   • ${colors.bright}/merlin:polish${colors.reset}           - Animation polish via animation-expert
   • ${colors.bright}/merlin:redesign${colors.reset}         - Full redesign via ui-builder
 
+${colors.cyan}Duo permissions (NEW in 5.3.2):${colors.reset}
+  • Auto-allowlist codex/duo Bash commands when Codex is installed
+
 ${colors.cyan}Merlin works with or without Sights:${colors.reset}
   • ${colors.green}With Sights${colors.reset}: Instant context, cross-session memory
   • ${colors.green}Without${colors.reset}: Full workflows, uses file exploration

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-merlin-brain",
-  "version": "5.3.1",
+  "version": "5.3.2",
   "description": "Merlin - The Ultimate AI Brain for Claude Code, Codex, and other AI CLIs. One install: workflows, agents, loop, and Sights MCP server.",
   "type": "module",
   "main": "./dist/server/index.js",