helloagents 3.0.23 → 3.0.25

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "helloagents",
-  "version": "3.0.23",
+  "version": "3.0.25",
   "description": "HelloAGENTS — The orchestration kernel that makes any AI CLI smarter. Adds intelligent routing, quality verification (Ralph Loop), safety guards, and notifications.",
   "author": {
     "name": "HelloWind",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "helloagents",
-  "version": "3.0.23",
+  "version": "3.0.25",
   "description": "HelloAGENTS — Quality-driven orchestration kernel for AI CLIs with intelligent routing, quality verification (Ralph Loop), safety guards, and notifications.",
   "author": {
     "name": "HelloWind",

package/README.md

@@ -8,7 +8,7 @@
 
 **A workflow layer for AI coding CLIs: skills, project knowledge, delivery checks, safer config writes, and resumable execution.**
 
-[![Version](https://img.shields.io/badge/version-3.0.23-orange.svg)](./package.json)
+[![Version](https://img.shields.io/badge/version-3.0.25-orange.svg)](./package.json)
 [![npm](https://img.shields.io/npm/v/helloagents.svg)](https://www.npmjs.com/package/helloagents)
 [![Node](https://img.shields.io/badge/node-%3E%3D18-339933.svg)](./package.json)
 [![Skills](https://img.shields.io/badge/skills-14-6366f1.svg)](./skills)
@@ -233,7 +233,7 @@ npm install -g helloagents
 If another executable named `helloagents` already exists in your `PATH`, use the stable managed-entry alias:
 
 ```bash
-helloagents-js.cmd
+helloagents-js
 ```
 
 By default, `postinstall` installs the package command, initializes `~/.helloagents/helloagents.json`, and syncs runtime files to `~/.helloagents/helloagents`. No host CLI is deployed unless you set `HELLOAGENTS=target[:mode]`, such as `HELLOAGENTS=codex:global`.
@@ -313,7 +313,7 @@ If you omit `--standby` or `--global`, HelloAGENTS first reuses the tracked/dete
 
 Use these when you do not want to depend on the `helloagents` binary being available during package updates. In `HELLOAGENTS=target[:mode]`, target can be `all`, `claude`, `gemini`, or `codex`; mode can be `standby` or `global`, and defaults to `standby`.
 
-Host configs use the stable `helloagents-js.cmd` entrypoint and runtime root `~/.helloagents/helloagents`, so Node global package paths can change without breaking managed hooks or Codex `notify`. Codex hooks use standalone `~/.codex/hooks.json` instead of adding large hook blocks to `config.toml`.
+Host configs use the stable `helloagents-js` entrypoint and runtime root `~/.helloagents/helloagents`, so Node global package paths can change without breaking managed hooks or Codex `notify`. Codex hooks use standalone `~/.codex/hooks.json` instead of adding large hook blocks to `config.toml`, and Codex global plugin roots plus plugin cache now link back to that same stable runtime root.
 
 #### npm commands
 
@@ -406,6 +406,8 @@ $env:HELLOAGENTS="codex:standby"; $env:HELLOAGENTS_ACTION="cleanup"; irm https:/
 $env:HELLOAGENTS="gemini"; $env:HELLOAGENTS_ACTION="uninstall"; irm https://raw.githubusercontent.com/hellowind777/helloagents/main/install.ps1 | iex
 ```
 
+The PowerShell wrapper now forwards the same npm arguments as `install.sh`, so install, update, cleanup, uninstall, and `switch-branch` stay on the same lifecycle path.
+
 ### Branch switching
 
 `switch-branch` installs the requested npm/GitHub ref first, then syncs host CLIs through npm scripts so it does not depend on the `helloagents` executable during updates:
@@ -439,7 +441,7 @@ npm uninstall -g helloagents
 |-----|----------------|----------------|
 | Claude Code | native plugin install | managed by Claude Code plugin system |
 | Gemini CLI | native extension install | managed by Gemini extension system |
-| Codex CLI | native local-plugin chain | `~/.agents/plugins/marketplace.json`, `~/plugins/helloagents/`, `~/.codex/plugins/cache/local-plugins/helloagents/local/`, `~/.codex/config.toml`, `~/.codex/hooks.json`, `~/.codex/helloagents -> ~/plugins/helloagents` |
+| Codex CLI | native local-plugin chain | `~/.agents/plugins/marketplace.json`, `~/plugins/helloagents/ -> ~/.helloagents/helloagents`, `~/.codex/plugins/cache/local-plugins/helloagents/local/ -> ~/.helloagents/helloagents`, `~/.codex/config.toml`, `~/.codex/hooks.json`, `~/.codex/helloagents -> ~/.helloagents/helloagents` |
 
 In global mode, HelloAGENTS now attempts the host-native install commands automatically. If a host command is unavailable, run the same commands manually:
 
@@ -641,10 +643,13 @@ Codex is rules-file driven by default.
 
 - standby writes `~/.codex/AGENTS.md`
 - standby writes a managed `model_instructions_file = "~/.codex/AGENTS.md"`
-- standby writes a managed `notify = ["helloagents-js.cmd", "codex-notify"]` command for closeout notification
+- standby writes a managed `notify = ["helloagents-js", "codex-notify"]` command for closeout notification
 - standby writes silent Codex hooks to `~/.codex/hooks.json`
+- Codex `SessionStart` stays silent and reads the current `~/.helloagents/helloagents.json` at runtime instead of baking a config snapshot into `config.toml`, so first-turn and post-compaction settings stay current
+- install and update also sync HelloAGENTS-managed Codex hook trust state in `~/.codex/config.toml`, so Codex 0.129.0+ does not re-prompt for the managed hooks
 - standby creates `~/.codex/helloagents -> ~/.helloagents/helloagents`
-- global mode installs the native local-plugin chain and also loads silent hooks from `~/.codex/hooks.json`
+- global mode installs the native local-plugin chain, but keeps `~/.helloagents/helloagents` as the single managed runtime source by linking plugin roots, plugin cache, and `~/.codex/helloagents` back to it
+- cleanup removes only the HelloAGENTS-managed hook trust entries and legacy managed notify residues, while keeping user-owned hook state untouched
 - Codex hooks only synchronize runtime state and enforce Stop gates; they do not inject HelloAGENTS rules or route text through hook output
 - Codex closeout de-duplicates Stop hooks and native `codex-notify`, so one turn does not notify twice
 - `/goal` remains Codex-native. Enable it explicitly with `helloagents codex goals enable` when long-running plan execution is needed
@@ -658,11 +663,13 @@ Run all tests:
 npm test
 ```
 
-The current suite includes 107 tests and covers:
+The current suite includes 116 tests and covers:
 
 - install, update, uninstall, cleanup, and mode switching
+- one-shot PowerShell lifecycle dispatch for install, update, cleanup, uninstall, and branch switching
 - Claude, Gemini, and Codex config merge and restore behavior
-- Codex managed `model_instructions_file`, `notify`, `hooks.json`, local plugin, marketplace, and cache behavior
+- Codex managed `model_instructions_file`, `notify`, `hooks.json`, hook trust state, local plugin, marketplace, and cache behavior
+- Codex cleanup of legacy managed notify variants on Windows and canonical managed notify restoration rules
 - Codex `/goal` feature toggles, long-running route context, and goal-aware command contracts
 - `helloagents doctor`
 - project storage and `repo-shared` behavior

package/README_CN.md

@@ -8,7 +8,7 @@
 
 **面向 AI 编码 CLI 的工作流层：技能、知识库、交付检查、更安全的配置写入，以及可恢复的执行流程。**
 
-[![Version](https://img.shields.io/badge/version-3.0.23-orange.svg)](./package.json)
+[![Version](https://img.shields.io/badge/version-3.0.25-orange.svg)](./package.json)
 [![npm](https://img.shields.io/npm/v/helloagents.svg)](https://www.npmjs.com/package/helloagents)
 [![Node](https://img.shields.io/badge/node-%3E%3D18-339933.svg)](./package.json)
 [![Skills](https://img.shields.io/badge/skills-14-6366f1.svg)](./skills)
@@ -233,7 +233,7 @@ npm install -g helloagents
 如果系统里已经有别的 `helloagents` 可执行文件，可以使用稳定的受管入口别名：
 
 ```bash
-helloagents-js.cmd
+helloagents-js
 ```
 
 默认情况下，`postinstall` 会安装包命令、初始化 `~/.helloagents/helloagents.json`，并把运行时文件同步到 `~/.helloagents/helloagents`。如果希望 npm 在安装或更新后直接部署，设置 `HELLOAGENTS=目标[:模式]`，例如 `HELLOAGENTS=codex:global`。
@@ -313,7 +313,7 @@ helloagents codex goals enable
 
 当你不想依赖更新过程中的 `helloagents` 可执行文件时，用 npm 或一键脚本。`HELLOAGENTS=目标[:模式]` 中，目标支持 `all`、`claude`、`gemini`、`codex`；模式支持 `standby`、`global`，省略时默认 `standby`。
 
-宿主配置使用稳定的 `helloagents-js.cmd` 入口和运行根目录 `~/.helloagents/helloagents`，Node 全局包路径变化不会破坏受管 hooks 或 Codex `notify`。Codex hooks 使用独立 `~/.codex/hooks.json`，不把大段配置写入 `config.toml`。
+宿主配置使用稳定的 `helloagents-js` 入口和运行根目录 `~/.helloagents/helloagents`，Node 全局包路径变化不会破坏受管 hooks 或 Codex `notify`。Codex hooks 使用独立 `~/.codex/hooks.json`，不把大段配置写入 `config.toml`；Codex 全局插件根目录和插件缓存也会回链到这个稳定运行根目录。
 
 #### npm 命令
 
@@ -406,6 +406,8 @@ $env:HELLOAGENTS="codex:standby"; $env:HELLOAGENTS_ACTION="cleanup"; irm https:/
 $env:HELLOAGENTS="gemini"; $env:HELLOAGENTS_ACTION="uninstall"; irm https://raw.githubusercontent.com/hellowind777/helloagents/main/install.ps1 | iex
 ```
 
+PowerShell 包装脚本现在会传递与 `install.sh` 相同的 npm 参数，因此安装、更新、清理、卸载和 `switch-branch` 走的是同一条生命周期链路。
+
 ### 分支切换
 
 `switch-branch` 会先安装指定 npm/GitHub ref，再通过 npm 脚本同步宿主 CLI，避免依赖更新过程中的 `helloagents` 可执行文件：
@@ -439,7 +441,7 @@ npm uninstall -g helloagents
 |-----|----------|----------|
 | Claude Code | 原生插件安装 | 由 Claude Code 插件系统管理 |
 | Gemini CLI | 原生扩展安装 | 由 Gemini 扩展系统管理 |
-| Codex CLI | 原生本地插件流程 | `~/.agents/plugins/marketplace.json`、`~/plugins/helloagents/`、`~/.codex/plugins/cache/local-plugins/helloagents/local/`、`~/.codex/config.toml`、`~/.codex/hooks.json`、`~/.codex/helloagents -> ~/plugins/helloagents` |
+| Codex CLI | 原生本地插件流程 | `~/.agents/plugins/marketplace.json`、`~/plugins/helloagents/ -> ~/.helloagents/helloagents`、`~/.codex/plugins/cache/local-plugins/helloagents/local/ -> ~/.helloagents/helloagents`、`~/.codex/config.toml`、`~/.codex/hooks.json`、`~/.codex/helloagents -> ~/.helloagents/helloagents` |
 
 全局模式下，HelloAGENTS 会自动尝试宿主原生命令。若宿主命令不可用，再手动执行：
 
@@ -643,10 +645,13 @@ Codex 默认走规则文件驱动。
 
 - 标准模式写入 `~/.codex/AGENTS.md`
 - 标准模式写入受管 `model_instructions_file = "~/.codex/AGENTS.md"`
-- 标准模式写入受管 `notify = ["helloagents-js.cmd", "codex-notify"]` 命令用于收尾通知
+- 标准模式写入受管 `notify = ["helloagents-js", "codex-notify"]` 命令用于收尾通知
 - 标准模式把静默 Codex hooks 写入 `~/.codex/hooks.json`
+- Codex 的 `SessionStart` 保持静默，并在运行时读取当前 `~/.helloagents/helloagents.json`，不会把配置快照固化进 `config.toml`，因此首次对话和上下文压缩后的设置都能保持最新
+- 安装和更新还会把 HelloAGENTS 受管的 Codex hook trust 状态同步到 `~/.codex/config.toml`，因此 Codex 0.129.0+ 不会再对这些受管 hooks 反复提示确认
 - 标准模式创建 `~/.codex/helloagents -> ~/.helloagents/helloagents`
-- 全局模式安装原生本地插件流程，并同样用 `~/.codex/hooks.json` 加载静默 hooks
+- 全局模式安装原生本地插件流程，但仍把 `~/.helloagents/helloagents` 作为唯一受管运行时源；插件根目录、插件缓存和 `~/.codex/helloagents` 都会回链到它
+- 清理时只删除 HelloAGENTS 自己写入的 hook trust 条目和旧式受管 notify 残留，不影响用户已有的 hook 状态
 - Codex hooks 只做静默运行态同步和 Stop 门禁，不通过 hook 注入 HelloAGENTS 规则或路由说明
 - Codex 收尾会对 Stop hook 和原生 `codex-notify` 去重，避免同一轮重复通知
 - `/goal` 保持 Codex 原生能力；需要长程执行时，用 `helloagents codex goals enable` 显式启用
@@ -660,11 +665,13 @@ Codex 默认走规则文件驱动。
 npm test
 ```
 
-当前测试共 107 项，覆盖：
+当前测试共 116 项，覆盖：
 
 - 安装、更新、卸载、清理和模式切换
+- PowerShell 一键脚本的安装、更新、清理、卸载和分支切换分发链路
 - Claude、Gemini、Codex 的配置合并与恢复
-- Codex 受管 `model_instructions_file`、`notify`、`hooks.json`、本地插件、marketplace 和缓存行为
+- Codex 受管 `model_instructions_file`、`notify`、`hooks.json`、hook trust 状态、本地插件、marketplace 和缓存行为
+- Windows 下 Codex 旧式受管 notify 变体的清理，以及受管 notify 恢复规则
 - Codex `/goal` 功能开关、长程路由上下文和 goal 感知命令契约
 - `helloagents doctor`
 - 项目存储和 `repo-shared`

package/bootstrap-lite.md

@@ -6,7 +6,7 @@
 配置文件: ~/.helloagents/helloagents.json
 `output_language` 非空时，所有用户可见文本使用该语言；为空则跟随用户当前语言。
 会话级缓存优先：当前上下文已有"当前用户设置"、原始 JSON 或读取摘要，且覆盖所需配置项时，直接复用。
-仅在缺少所需项、用户要求刷新，或本轮修改后需要核验时读取；输出格式只在缺少 `output_format` 已知值时触发读取。
+仅在缺少所需项、用户要求刷新，或本轮修改后需要核验时读取；对 Codex 来说，首次对话前若当前上下文仍缺少所需配置项，必须先读取一次 `~/.helloagents/helloagents.json`，压缩/恢复后的首次对话同样先重读一次；输出格式只在缺少 `output_format` 已知值时触发读取。
 同一会话内，同一路径的配置文件、模块、SKILL、模板只读一次并跨轮复用；读取失败必须明示，并按默认值或已知设置执行。
 
 ## 编码原则

package/bootstrap.md

@@ -6,7 +6,7 @@
 配置文件: ~/.helloagents/helloagents.json
 `output_language` 非空时，所有用户可见文本使用该语言；为空则跟随用户当前语言。
 会话级缓存优先：当前上下文已有"当前用户设置"、原始 JSON 或读取摘要，且覆盖所需配置项时，直接复用。
-仅在缺少所需项、用户要求刷新，或本轮修改后需要核验时读取；输出格式只在缺少 `output_format` 已知值时触发读取。
+仅在缺少所需项、用户要求刷新，或本轮修改后需要核验时读取；对 Codex 来说，首次对话前若当前上下文仍缺少所需配置项，必须先读取一次 `~/.helloagents/helloagents.json`，压缩/恢复后的首次对话同样先重读一次；输出格式只在缺少 `output_format` 已知值时触发读取。
 同一会话内，同一路径的配置文件、模块、SKILL、模板只读一次并跨轮复用；读取失败必须明示，并按默认值或已知设置执行。
 
 ## 编码原则

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "helloagents",
-  "version": "3.0.23",
+  "version": "3.0.25",
   "description": "Quality-driven orchestration kernel for AI CLIs",
   "contextFileName": "bootstrap.md",
   "author": "HelloWind",

package/install.ps1

@@ -47,10 +47,10 @@ if (-not $Package) {
 }
 
 function Invoke-Npm {
-    param([string[]]$Args)
-    & npm @Args
+    param([string[]]$NpmArgs)
+    & npm @NpmArgs
     if ($LASTEXITCODE -ne 0) {
-        throw "npm $($Args -join ' ') failed with exit code $LASTEXITCODE"
+        throw "npm $($NpmArgs -join ' ') failed with exit code $LASTEXITCODE"
     }
 }
 
@@ -63,9 +63,9 @@ function Enable-PostinstallDeploy {
 function Invoke-HostScript {
     param([string]$ScriptName)
     if ($Target -eq "all") {
-        Invoke-Npm @("explore", "-g", "helloagents", "--", "npm", "run", $ScriptName, "--", "--all", "--$Mode")
+        Invoke-Npm -NpmArgs @("explore", "-g", "helloagents", "--", "npm", "run", $ScriptName, "--", "--all", "--$Mode")
     } else {
-        Invoke-Npm @("explore", "-g", "helloagents", "--", "npm", "run", $ScriptName, "--", $Target, "--$Mode")
+        Invoke-Npm -NpmArgs @("explore", "-g", "helloagents", "--", "npm", "run", $ScriptName, "--", $Target, "--$Mode")
     }
 }
 
@@ -84,15 +84,15 @@ function Uninstall-Hosts {
 switch ($Action) {
     "install" {
         Enable-PostinstallDeploy
-        Invoke-Npm @("install", "-g", $Package)
+        Invoke-Npm -NpmArgs @("install", "-g", $Package)
     }
     "update" {
         if ($Branch -or $env:HELLOAGENTS_PACKAGE) {
-            Invoke-Npm @("install", "-g", $Package)
+            Invoke-Npm -NpmArgs @("install", "-g", $Package)
         } else {
             & npm update -g helloagents
             if ($LASTEXITCODE -ne 0) {
-                Invoke-Npm @("install", "-g", "helloagents")
+                Invoke-Npm -NpmArgs @("install", "-g", "helloagents")
             }
         }
         Sync-Hosts
@@ -104,14 +104,14 @@ switch ($Action) {
         if (-not $Branch -and -not $env:HELLOAGENTS_PACKAGE) {
             throw "HELLOAGENTS_BRANCH or HELLOAGENTS_PACKAGE is required for switch-branch"
         }
-        Invoke-Npm @("install", "-g", $Package)
+        Invoke-Npm -NpmArgs @("install", "-g", $Package)
         Sync-Hosts
     }
     "branch" {
         if (-not $Branch -and -not $env:HELLOAGENTS_PACKAGE) {
             throw "HELLOAGENTS_BRANCH or HELLOAGENTS_PACKAGE is required for branch"
         }
-        Invoke-Npm @("install", "-g", $Package)
+        Invoke-Npm -NpmArgs @("install", "-g", $Package)
         Sync-Hosts
     }
     "uninstall" {
@@ -120,7 +120,7 @@ switch ($Action) {
         } catch {
             Write-Warning "Failed to cleanup HelloAGENTS host integrations before uninstall: $_"
         }
-        Invoke-Npm @("uninstall", "-g", "helloagents")
+        Invoke-Npm -NpmArgs @("uninstall", "-g", "helloagents")
     }
     default {
         throw "Unsupported HELLOAGENTS_ACTION: $Action"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "helloagents",
-  "version": "3.0.23",
+  "version": "3.0.25",
   "type": "module",
   "description": "HelloAGENTS — The orchestration kernel that makes any AI CLI smarter. Adds intelligent routing, quality verification (Ralph Loop), safety guards, and notifications.",
   "author": "HelloWind",

package/scripts/cli-codex-config.mjs

@@ -8,15 +8,22 @@ import {
 
 export const CODEX_PLUGIN_CONFIG_HEADER = '[plugins."helloagents@local-plugins"]'
 export const CODEX_FEATURES_HEADER = '[features]'
+export const CODEX_TUI_HEADER = '[tui]'
 export const CODEX_MANAGED_TOML_COMMENT = '# helloagents-managed'
 export const CODEX_MANAGED_MODEL_INSTRUCTIONS_PATH = '~/.codex/AGENTS.md'
-export const CODEX_MANAGED_NOTIFY_COMMAND = 'helloagents-js.cmd'
+export const CODEX_MANAGED_NOTIFY_COMMAND = 'helloagents-js'
 export const CODEX_MANAGED_NOTIFY_VALUE = `["${CODEX_MANAGED_NOTIFY_COMMAND}", "codex-notify"]`
+const CODEX_MANAGED_NOTIFY_LEGACY_VALUES = [
+  `["${CODEX_MANAGED_NOTIFY_COMMAND}.cmd", "codex-notify"]`,
+  `["${CODEX_MANAGED_NOTIFY_COMMAND}.exe", "codex-notify"]`,
+]
+export const CODEX_MANAGED_TUI_NOTIFICATIONS_VALUE = '["plan-mode-prompt"]'
 export const CODEX_HOOKS_FEATURE_KEY = 'hooks'
 export const CODEX_LEGACY_HOOKS_FEATURE_KEY = 'codex_hooks'
 export const CODEX_GOALS_FEATURE_KEY = 'goals'
 export const CODEX_MANAGED_GOALS_FEATURE_LINE = `${CODEX_GOALS_FEATURE_KEY} = true ${CODEX_MANAGED_TOML_COMMENT}`
 export const CODEX_MANAGED_GOALS_DISABLED_LINE = `${CODEX_GOALS_FEATURE_KEY} = false ${CODEX_MANAGED_TOML_COMMENT}`
+export const CODEX_MANAGED_TUI_NOTIFICATIONS_LINE = `notifications = ${CODEX_MANAGED_TUI_NOTIFICATIONS_VALUE} ${CODEX_MANAGED_TOML_COMMENT}`
 
 function normalizePath(value = '') {
   return String(value || '').replace(/\\/g, '/')
@@ -106,9 +113,17 @@ export function readCodexGoalsFeatureLine(text) {
   return readCodexFeatureLine(text, CODEX_GOALS_FEATURE_KEY)
 }
 
+export function readCodexTuiNotificationsLine(text) {
+  return readCodexSectionLine(text, CODEX_TUI_HEADER, 'notifications')
+}
+
 export function readCodexFeatureLine(text, key) {
+  return readCodexSectionLine(text, CODEX_FEATURES_HEADER, key)
+}
+
+export function readCodexSectionLine(text, headerLine, key) {
   const lines = splitTomlLines(text)
-  const bounds = findSectionBounds(lines, CODEX_FEATURES_HEADER)
+  const bounds = findSectionBounds(lines, headerLine)
   const keyIndex = findSectionKeyIndex(lines, bounds, key)
   return keyIndex >= 0 ? lines[keyIndex].trim() : ''
 }
@@ -157,7 +172,16 @@ export function isManagedCodexModelInstruction(line = '') {
 
 export function isManagedCodexNotify(line = '') {
   const value = String(line || '').replace(/\\/g, '/')
-  return value.includes(CODEX_MANAGED_NOTIFY_VALUE)
+  return value.includes(CODEX_MANAGED_TOML_COMMENT)
+    && (
+      value.includes(CODEX_MANAGED_NOTIFY_VALUE)
+      || CODEX_MANAGED_NOTIFY_LEGACY_VALUES.some((entry) => value.includes(entry))
+    )
+}
+
+export function isManagedCodexTuiNotifications(line = '') {
+  return String(line || '').includes(CODEX_MANAGED_TUI_NOTIFICATIONS_VALUE)
+    && String(line || '').includes(CODEX_MANAGED_TOML_COMMENT)
 }
 
 function isManagedFeatureLine(line = '', key = '') {
@@ -223,6 +247,29 @@ export function installCodexManagedTopLevelConfig(toml, { modelInstructionsPath
   ])
 }
 
+export function installCodexManagedTuiConfig(text) {
+  const currentLine = readCodexTuiNotificationsLine(text)
+  if (currentLine && !isManagedCodexTuiNotifications(currentLine)) {
+    return normalizeToml(text)
+  }
+
+  return upsertTomlSectionLine(
+    text,
+    CODEX_TUI_HEADER,
+    'notifications',
+    CODEX_MANAGED_TUI_NOTIFICATIONS_LINE,
+  )
+}
+
+export function removeCodexManagedTuiConfig(text) {
+  return removeTomlSectionLine(
+    text,
+    CODEX_TUI_HEADER,
+    'notifications',
+    isManagedCodexTuiNotifications,
+  )
+}
+
 export function restoreCodexTopLevelConfig(toml, { modelInstructionsLine = '', notifyLine = '' }) {
   return upsertOrderedCodexTopLevelLines(toml, [
     modelInstructionsLine,

package/scripts/cli-codex-hooks-state.mjs

@@ -0,0 +1,264 @@
+import { createHash } from 'node:crypto'
+
+import { isTomlTableHeader, normalizeToml } from './cli-toml.mjs'
+import { removeIfExists, safeJson, safeRead, safeWrite } from './cli-utils.mjs'
+
+const MANAGED_MARKER = '# helloagents-managed'
+
+const HOOK_EVENT_KEY = {
+  PreToolUse: 'pre_tool_use',
+  PermissionRequest: 'permission_request',
+  PostToolUse: 'post_tool_use',
+  PreCompact: 'pre_compact',
+  PostCompact: 'post_compact',
+  SessionStart: 'session_start',
+  UserPromptSubmit: 'user_prompt_submit',
+  Stop: 'stop',
+}
+
+const EVENTS_WITH_MATCHER = new Set([
+  'PreToolUse',
+  'PermissionRequest',
+  'PostToolUse',
+  'PreCompact',
+  'PostCompact',
+  'SessionStart',
+])
+
+const HOOK_STATE_HEADER_RE = /^\[hooks\.state\."((?:\\.|[^"])*)"\](?:\s*#.*)?$/
+
+function normalizeLineEndings(text = '') {
+  return String(text || '').replace(/\r\n/g, '\n')
+}
+
+function escapeTomlBasicString(value = '') {
+  return String(value || '')
+    .replace(/\\/g, '\\\\')
+    .replace(/"/g, '\\"')
+}
+
+function unescapeTomlBasicString(value = '') {
+  return String(value || '')
+    .replace(/\\"/g, '"')
+    .replace(/\\\\/g, '\\')
+}
+
+function canonicalizeJson(value) {
+  if (Array.isArray(value)) return value.map(canonicalizeJson)
+  if (!value || typeof value !== 'object') return value
+
+  return Object.keys(value)
+    .sort()
+    .reduce((acc, key) => {
+      if (value[key] !== undefined) acc[key] = canonicalizeJson(value[key])
+      return acc
+    }, {})
+}
+
+function hashNormalizedHookIdentity(identity) {
+  const serialized = JSON.stringify(canonicalizeJson(identity))
+  return `sha256:${createHash('sha256').update(serialized).digest('hex')}`
+}
+
+function normalizeHookMatcher(eventName, matcher) {
+  if (!EVENTS_WITH_MATCHER.has(eventName)) return undefined
+  return matcher === undefined ? undefined : String(matcher)
+}
+
+function normalizeHookTimeout(timeout) {
+  const value = Number(timeout)
+  if (!Number.isFinite(value)) return 600
+  return Math.max(1, Math.trunc(value))
+}
+
+function buildHookDescriptor(eventName, group, handler) {
+  return JSON.stringify({
+    eventName,
+    matcher: normalizeHookMatcher(eventName, group?.matcher),
+    command: handler?.command || '',
+  })
+}
+
+function buildNormalizedHookIdentity(eventName, group, handler) {
+  const matcher = normalizeHookMatcher(eventName, group?.matcher)
+  const statusMessage = typeof handler?.statusMessage === 'string'
+    ? handler.statusMessage
+    : undefined
+
+  return {
+    event_name: HOOK_EVENT_KEY[eventName],
+    ...(matcher !== undefined ? { matcher } : {}),
+    hooks: [
+      {
+        type: 'command',
+        command: String(handler?.command || ''),
+        timeout: normalizeHookTimeout(handler?.timeout),
+        async: Boolean(handler?.async),
+        ...(statusMessage !== undefined ? { statusMessage } : {}),
+      },
+    ],
+  }
+}
+
+function isHelloagentsCommandHandler(handler) {
+  return handler?.type === 'command'
+    && typeof handler.command === 'string'
+    && handler.command.includes('helloagents')
+}
+
+function serializeHookStateBlock(entry) {
+  const lines = [`[hooks.state."${escapeTomlBasicString(entry.key)}"]`]
+  if (entry.enabled === false) lines.push('enabled = false')
+  lines.push(`trusted_hash = "${escapeTomlBasicString(entry.trustedHash)}" ${MANAGED_MARKER}`)
+  return lines.join('\n')
+}
+
+function collectHookStateSections(text = '') {
+  const lines = normalizeLineEndings(text).split('\n')
+  const sections = []
+
+  for (let index = 0; index < lines.length; index += 1) {
+    const match = HOOK_STATE_HEADER_RE.exec(lines[index].trim())
+    if (!match) continue
+
+    let end = lines.length
+    for (let cursor = index + 1; cursor < lines.length; cursor += 1) {
+      if (isTomlTableHeader(lines[cursor])) {
+        end = cursor
+        break
+      }
+    }
+
+    const bodyLines = lines.slice(index + 1, end)
+    const enabledLine = bodyLines.find((line) => /^\s*enabled\s*=/.test(line))
+    const trustedHashLine = bodyLines.find((line) => /^\s*trusted_hash\s*=/.test(line))
+    const trustedHashMatch = trustedHashLine?.match(/^\s*trusted_hash\s*=\s*"((?:\\.|[^"])*)"/)
+
+    sections.push({
+      key: unescapeTomlBasicString(match[1]),
+      start: index,
+      end,
+      enabled: /^\s*enabled\s*=\s*false\b/.test(enabledLine || '') ? false : undefined,
+      trustedHash: trustedHashMatch ? unescapeTomlBasicString(trustedHashMatch[1]) : '',
+      managed: lines[index].includes(MANAGED_MARKER)
+        || bodyLines.some((line) => line.includes(MANAGED_MARKER)),
+    })
+
+    index = end - 1
+  }
+
+  return { lines, sections }
+}
+
+function removeHookStateSections(text, shouldRemove) {
+  const { lines, sections } = collectHookStateSections(text)
+  if (!sections.length) return normalizeToml(text)
+
+  const removedStarts = new Set(
+    sections
+      .filter(shouldRemove)
+      .map((section) => section.start),
+  )
+
+  if (!removedStarts.size) return normalizeToml(text)
+
+  const kept = []
+  for (let index = 0; index < lines.length;) {
+    const section = sections.find((item) => item.start === index)
+    if (!section) {
+      kept.push(lines[index])
+      index += 1
+      continue
+    }
+    if (!removedStarts.has(section.start)) {
+      kept.push(...lines.slice(section.start, section.end))
+    }
+    index = section.end
+  }
+
+  return normalizeToml(kept.join('\n'))
+}
+
+function appendHookStateBlocks(text, entries) {
+  if (!entries.length) return normalizeToml(text)
+  const blocks = entries.map(serializeHookStateBlock).join('\n\n')
+  const base = normalizeLineEndings(text).trimEnd()
+  return normalizeToml(base ? `${base}\n\n${blocks}` : blocks)
+}
+
+export function buildManagedCodexHookTrustEntries(hooksPath, hooksData = safeJson(hooksPath)) {
+  const hooks = hooksData?.hooks
+  if (!hooks || typeof hooks !== 'object') return []
+
+  const entries = []
+  for (const eventName of Object.keys(HOOK_EVENT_KEY)) {
+    const groups = hooks[eventName]
+    if (!Array.isArray(groups)) continue
+
+    groups.forEach((group, groupIndex) => {
+      const handlers = Array.isArray(group?.hooks) ? group.hooks : []
+      handlers.forEach((handler, handlerIndex) => {
+        if (!isHelloagentsCommandHandler(handler)) return
+
+        const key = `${hooksPath}:${HOOK_EVENT_KEY[eventName]}:${groupIndex}:${handlerIndex}`
+        entries.push({
+          key,
+          trustedHash: hashNormalizedHookIdentity(
+            buildNormalizedHookIdentity(eventName, group, handler),
+          ),
+          descriptor: buildHookDescriptor(eventName, group, handler),
+        })
+      })
+    })
+  }
+
+  return entries
+}
+
+export function readCodexHookStateSections(text = '') {
+  return collectHookStateSections(text).sections
+}
+
+export function syncManagedCodexHookTrust(configPath, hooksPath, hooksData = safeJson(hooksPath)) {
+  const entries = buildManagedCodexHookTrustEntries(hooksPath, hooksData)
+  if (!entries.length) return cleanupManagedCodexHookTrust(configPath)
+
+  const keySet = new Set(entries.map((entry) => entry.key))
+  const existingText = safeRead(configPath) || ''
+  const existingSections = readCodexHookStateSections(existingText)
+  const enabledByDescriptor = new Map()
+
+  for (const section of existingSections) {
+    if (!keySet.has(section.key) || section.enabled !== false) continue
+    const matchingEntry = entries.find((entry) => entry.key === section.key)
+    if (matchingEntry) enabledByDescriptor.set(matchingEntry.descriptor, false)
+  }
+
+  const cleanedText = removeHookStateSections(
+    existingText,
+    (section) => section.managed || keySet.has(section.key),
+  )
+
+  const nextEntries = entries.map((entry) => ({
+    ...entry,
+    enabled: enabledByDescriptor.get(entry.descriptor),
+  }))
+
+  const nextText = appendHookStateBlocks(cleanedText, nextEntries)
+  if (normalizeLineEndings(nextText) === normalizeLineEndings(existingText)) return false
+
+  safeWrite(configPath, nextText)
+  return true
+}
+
+export function cleanupManagedCodexHookTrust(configPath) {
+  const existingText = safeRead(configPath)
+  if (!existingText) return false
+
+  const nextText = removeHookStateSections(existingText, (section) => section.managed)
+  if (normalizeLineEndings(nextText) === normalizeLineEndings(existingText)) return false
+
+  if (nextText.trim()) safeWrite(configPath, nextText)
+  else removeIfExists(configPath)
+  return true
+}