great-cto 2.33.1 → 2.35.0

package/dist/adapt.js

@@ -9,7 +9,7 @@
 //   great-cto adapt --dry-run  Show what would be written
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-const VALID_AI_TOOLS = ["claude-code", "cursor", "copilot", "windsurf", "aider"];
+const VALID_AI_TOOLS = ["claude-code", "cursor", "copilot", "windsurf", "aider", "codex"];
 function parseAiTools(text) {
     const line = text.match(/^ai_tools:\s*(.+)$/m)?.[1] ?? "";
     // Support: [claude-code, cursor] or claude-code, cursor or claude-code
@@ -311,6 +311,112 @@ auto-commits: false
 dirty-commits: false
 `;
 }
+// ── Codex adapter helpers ──────────────────────────────────────────────────
+/**
+ * hooks.json content for ~/.codex/skills/great_cto/hooks.json.
+ *
+ * Phase 0 findings (2026-06-04, confirmed against Codex Desktop binary):
+ * - Hook events: PreToolUse, PostToolUse, SessionStart, SubagentStart,
+ *   SubagentStop, PreCompact, PostCompact, UserPromptSubmit, PermissionRequest.
+ * - stdin payload: same keys as Claude Code (tool_name, tool_input, is_error).
+ * - block/deny: hookSpecificOutput.permissionDecision (same struct as CC)
+ *   confirmed by binary string literals.
+ * - Hooks enabled by [features].hooks = true in config.toml.
+ *
+ * @param skillDir - absolute path to ~/.codex/skills/great_cto (used to build hook commands)
+ */
+export function getCodexHooksJson(skillDir) {
+    const s = skillDir; // shorthand
+    return JSON.stringify({
+        "SessionStart": [
+            {
+                "hooks": [
+                    { "command": `node "${s}/scripts/hooks/quota-check.mjs" 2>/dev/null || true`, "timeout": 15 }
+                ]
+            }
+        ],
+        "PreToolUse": [
+            {
+                "matcher": "computer|bash|shell",
+                "hooks": [
+                    { "command": `node "${s}/scripts/hooks/orchestrator-check.mjs" 2>/dev/null || true`, "timeout": 5 },
+                    { "command": `node "${s}/scripts/hooks/cost-guard.mjs" 2>/dev/null || true`, "timeout": 5 }
+                ]
+            },
+            {
+                "matcher": "edit|write|str_replace_editor|computer",
+                "hooks": [
+                    { "command": `node "${s}/scripts/hooks/secret-scan.mjs" 2>/dev/null || true`, "timeout": 8 }
+                ]
+            }
+        ],
+        "PostToolUse": [
+            {
+                "matcher": "edit|write|str_replace_editor",
+                "hooks": [
+                    { "command": `node "${s}/scripts/hooks/format-check.mjs" 2>/dev/null; true`, "timeout": 12, "async": true },
+                    { "command": `node "${s}/scripts/hooks/tool-failure.mjs" 2>/dev/null || true`, "timeout": 3, "async": true }
+                ]
+            },
+            {
+                "matcher": "",
+                "hooks": [
+                    { "command": `node "${s}/scripts/hooks/tool-failure.mjs" 2>/dev/null || true`, "timeout": 3, "async": true }
+                ]
+            }
+        ]
+    }, null, 2);
+}
+/**
+ * config.toml fragment to merge into ~/.codex/config.toml.
+ * Adds: [features].hooks=true, [mcp_servers.great_cto], [agents.great_cto_skill].
+ * Written as a separate file (.codex/great_cto.toml) since merging TOML is
+ * non-trivial; installer prints merge instructions.
+ */
+function getCodexConfigFragment(meta) {
+    return `# great_cto Codex integration — generated by great-cto adapt
+# Merge this into ~/.codex/config.toml or copy the sections manually.
+# Generated: ${new Date().toISOString().slice(0, 10)}
+
+[features]
+hooks = true
+
+[mcp_servers.great_cto]
+command = "npx"
+args = ["great-cto@latest", "mcp"]
+# Set startup timeout generously — npx downloads on first run
+startup_timeout_sec = 60
+
+[mcp_servers.great_cto.env]
+# Point hooks at the skill dir so hook scripts resolve correctly.
+CODEX_SKILL_DIR = "${process.env.HOME ?? "~"}/.codex/skills/great_cto"
+
+# Agents exposed via MCP (great_cto specialist fleet)
+# Codex will use these as subagent personalities via the [agents] table.
+# Full 57-agent routing is handled inside AGENTS.md / SKILL.md.
+[agents.great_cto_architect]
+description = "Deep architectural reasoning, ADRs, cross-cutting design decisions"
+
+[agents.great_cto_senior_dev]
+description = "Feature implementation with TDD — RED→GREEN→REFACTOR"
+
+[agents.great_cto_qa_engineer]
+description = "QA reports, coverage, regression check after implementation"
+
+[agents.great_cto_security_officer]
+description = "Security audit — OWASP Top 10, auth, PII, secrets"
+
+[agents.great_cto_devops]
+description = "Deploy, canary rollout, rollback, SLO monitoring"
+
+[agents.great_cto_pm]
+description = "Feature decomposition into tasks, timeline, dependency graph"
+
+# Archetype: ${meta.archetype}
+# Compliance: ${meta.compliance.join(", ") || "none"}
+# Re-run great-cto adapt --platform codex to refresh.
+`;
+}
 function getCliVersion() {
     try {
         const here = dirname(new URL(import.meta.url).pathname);
@@ -395,6 +501,21 @@ conventions. Generated by \`great-cto adapt\`.
                     out.push(".aider.conf.yml");
                 break;
             }
+            case "codex": {
+                // Write hooks.json + config.toml fragment to .codex/ (project-scoped, trusted)
+                const defaultSkillDir = `${process.env.HOME ?? "~"}/.codex/skills/great_cto`;
+                const hooksPath = join(cwd, ".codex", "hooks.json");
+                const configPath = join(cwd, ".codex", "great_cto.toml");
+                if (writeFile(hooksPath, getCodexHooksJson(defaultSkillDir), dryRun))
+                    out.push(".codex/hooks.json");
+                if (writeFile(configPath, getCodexConfigFragment(meta), dryRun))
+                    out.push(".codex/great_cto.toml");
+                if (!dryRun) {
+                    console.log("  ⚠  Codex: merge .codex/great_cto.toml sections into ~/.codex/config.toml");
+                    console.log("     Then restart Codex to activate hooks and MCP server.");
+                }
+                break;
+            }
             case "claude-code":
                 // Already handled above (CLAUDE.md + AGENTS.md)
                 break;

package/dist/main.js

@@ -49,6 +49,7 @@ function parseArgs(argv) {
         version: null,
         useLlm: false,
         noLlm: false,
+        host: null,
         positional: [],
     };
     const rest = [];
@@ -78,6 +79,14 @@ function parseArgs(argv) {
             args.useLlm = true;
         else if (a === "--no-llm")
             args.noLlm = true;
+        else if (a === "--host") {
+            const v = argv[++i] ?? "";
+            args.host = (v === "codex" || v === "claude-code") ? v : null;
+        }
+        else if (a.startsWith("--host=")) {
+            const v = a.slice("--host=".length);
+            args.host = (v === "codex" || v === "claude-code") ? v : null;
+        }
         else if (a === "board")
             args.command = "board";
         else if (a === "register")
@@ -408,7 +417,108 @@ ${bold("Links:")}
   github.com/avelikiy/great_cto
 `);
 }
+async function runInitCodex(args) {
+    const { homedir } = await import("node:os");
+    const home = homedir();
+    log(bold("great-cto · Codex host install"));
+    log("");
+    log(`Installing great_cto for ${cyan("OpenAI Codex")} (Desktop + CLI).`);
+    log(`This writes hook, MCP, and agent config to your Codex skill directory.`);
+    log("");
+    if (args.dryRun) {
+        log(yellow("dry-run: showing what would be written."));
+        log(`  would write: ${home}/.codex/skills/great_cto/hooks.json`);
+        log(`  would write: ${home}/.codex/skills/great_cto/scripts/  (hook .mjs files)`);
+        log(`  would update: .codex/great_cto.toml  (merge into ~/.codex/config.toml)`);
+        return 0;
+    }
+    const { mkdirSync, copyFileSync, existsSync, writeFileSync } = await import("node:fs");
+    const { join, dirname } = await import("node:path");
+    const { fileURLToPath } = await import("node:url");
+    // ── 1. locate the plugin source ──────────────────────────
+    // Works whether invoked via npx (global cache) or a local build.
+    // - npx run: dist/main.js → dist/ → ../ → package root → scripts/hooks/
+    // - dev run from packages/cli/: same as above
+    // - repo dev with ts-node: src/main.ts → src/ → ../ → packages/cli/ → ../../scripts/hooks/
+    const here = dirname(fileURLToPath(import.meta.url));
+    const hooksSearchPaths = [
+        join(here, "..", "scripts", "hooks"), // npm install: dist/../scripts/hooks
+        join(here, "..", "..", "scripts", "hooks"), // monorepo: packages/cli/dist/../../scripts
+        join(here, "..", "..", "..", "scripts", "hooks"), // ts-node: src/../../../scripts
+    ];
+    const hooksDir = hooksSearchPaths.find(p => existsSync(p));
+    if (!hooksDir) {
+        error("Could not locate scripts/hooks/. Try: npx great-cto@latest --host codex");
+        return 1;
+    }
+    // ── 2. install skill dir ──────────────────────────────────
+    const skillDir = join(home, ".codex", "skills", "great_cto");
+    const skillScriptsDir = join(skillDir, "scripts", "hooks");
+    mkdirSync(skillScriptsDir, { recursive: true });
+    log(dim(`  skill dir: ${skillDir}`));
+    // Copy hook scripts
+    const HOOKS_TO_COPY = [
+        "quota-check.mjs",
+        "secret-scan.mjs",
+        "cost-guard.mjs",
+        "orchestrator-check.mjs",
+        "format-check.mjs",
+        "tool-failure.mjs",
+        "summary-enforce.mjs",
+    ];
+    let copied = 0;
+    for (const hook of HOOKS_TO_COPY) {
+        const src = join(hooksDir, hook);
+        const dst = join(skillScriptsDir, hook);
+        if (existsSync(src)) {
+            copyFileSync(src, dst);
+            copied++;
+        }
+    }
+    log(`  ${green("✓")} ${copied} hook scripts → ${skillScriptsDir}`);
+    // Write hooks.json into the skill dir
+    const { getCodexHooksJson } = await import("./adapt.js");
+    const hooksJson = getCodexHooksJson(skillDir);
+    writeFileSync(join(skillDir, "hooks.json"), hooksJson);
+    log(`  ${green("✓")} wrote ~/.codex/skills/great_cto/hooks.json`);
+    // ── 3. write project-scoped config fragment ───────────────
+    const configFrag = join(args.dir, ".codex", "great_cto.toml");
+    mkdirSync(dirname(configFrag), { recursive: true });
+    writeFileSync(configFrag, [
+        `# great_cto Codex integration — generated ${new Date().toISOString().slice(0, 10)}`,
+        `# Add these sections to ~/.codex/config.toml`,
+        ``,
+        `[features]`,
+        `hooks = true`,
+        ``,
+        `[mcp_servers.great_cto]`,
+        `command = "npx"`,
+        `args = ["great-cto@latest", "mcp"]`,
+        `startup_timeout_sec = 60`,
+        ``,
+        `[mcp_servers.great_cto.env]`,
+        `CODEX_SKILL_DIR = "${skillDir}"`,
+        ``,
+        `[hooks_files]`,
+        `paths = ["${join(skillDir, "hooks.json")}"]`,
+    ].join("\n") + "\n");
+    log(`  ${green("✓")} wrote .codex/great_cto.toml`);
+    log("");
+    log(bold("Next steps:"));
+    log(`  1. Merge ${cyan(".codex/great_cto.toml")} sections into ${cyan("~/.codex/config.toml")}`);
+    log(`  2. Add ${cyan(args.dir)} to trusted projects in config.toml if not already:`);
+    log(`     ${dim(`[projects."${args.dir}"]`)}`);
+    log(`     ${dim(`trust_level = "trusted"`)}`);
+    log(`  3. Restart Codex Desktop / CLI to activate hooks and MCP server.`);
+    log(`  4. Verify: run ${cyan("great-cto mcp")} in a terminal — should list great_cto tools.`);
+    log("");
+    log(`${green("✓")} Codex host install complete.`);
+    return 0;
+}
 async function runInit(args) {
+    // Route to Codex-specific install if --host codex
+    if (args.host === "codex")
+        return runInitCodex(args);
     banner();
     // ── 1. detect ────────────────────────────────────────────
     // Guard: refuse to init in $HOME or other "obviously not a project" locations.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "great-cto",
-  "version": "2.33.1",
+  "version": "2.35.0",
   "description": "One command install for the great_cto Claude Code plugin. Auto-detects your stack, picks the right archetype, bootstraps PROJECT.md.",
   "keywords": [
     "claude-code",
@@ -71,7 +71,8 @@
     "dist/",
     "assets/",
     "postinstall.mjs",
-    "README.md"
+    "README.md",
+    "scripts/hooks/"
   ],
   "type": "module",
   "scripts": {