helloagents 3.0.38 → 3.1.1

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "helloagents",
-  "version": "3.0.38",
+  "version": "3.1.1",
   "description": "HelloAGENTS — The orchestration kernel that makes any AI CLI smarter. Adds intelligent routing, unified QA gates, safety guards, and notifications.",
   "author": {
     "name": "HelloWind",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "helloagents",
-  "version": "3.0.38",
+  "version": "3.1.1",
   "description": "HelloAGENTS — Quality-driven orchestration kernel for AI CLIs with intelligent routing, unified QA gates, safety guards, and notifications.",
   "author": {
     "name": "HelloWind",

package/README.md

@@ -8,7 +8,7 @@
 
 **A workflow layer for AI coding CLIs: skills, project knowledge, delivery checks, safer config writes, and resumable execution.**
 
-[![Version](https://img.shields.io/badge/version-3.0.38-orange.svg)](./package.json)
+[![Version](https://img.shields.io/badge/version-3.1.1-orange.svg)](./package.json)
 [![npm](https://img.shields.io/npm/v/helloagents.svg)](https://www.npmjs.com/package/helloagents)
 [![Node](https://img.shields.io/badge/node-%3E%3D18-339933.svg)](./package.json)
 [![Skills](https://img.shields.io/badge/skills-14-6366f1.svg)](./skills)
@@ -189,7 +189,7 @@ HelloAGENTS now resolves the current state file from `state_path`:
 
 `<workspace>` is the current Git branch, `detached-<sha>` for a detached HEAD, or `workspace` for non-Git projects. `<session>` is the current project-local session token. `.helloagents/sessions/active.json` only keeps the latest active workspace/session mapping plus alias bridges, so the same CLI session stays in one directory and `/resume` can reuse it.
 
-For project-local sessions, HelloAGENTS first uses stable host identifiers such as `sessionId`, `conversationId`, `threadId`, or `HELLOAGENTS_NOTIFY_SESSION_ID`. If the host only exposes a window or terminal id such as `WT_SESSION`, `TERM_SESSION_ID`, or `WINDOWID`, HelloAGENTS uses it only as a lightweight alias bridge and reuses the mapped session first instead of fanning out duplicate directories.
+For project-local sessions, HelloAGENTS first uses stable host identifiers such as `sessionId`, `conversationId`, `threadId`, or `HELLOAGENTS_NOTIFY_SESSION_ID`. If the host only exposes a window or terminal id such as `WT_SESSION`, `TERM_SESSION_ID`, or `WINDOWID`, HelloAGENTS uses it only as a lightweight alias bridge and reuses the mapped session first instead of fanning out duplicate directories. If a session starts before a stable host identifier is available, HelloAGENTS can begin in `default` and keep reusing that same active directory after the same CLI session later exposes a stable identifier, instead of splitting into a second session directory.
 
 `STATE.md` records where the current workflow stopped. It is not a universal memory file for every conversation. Codex `/goal` does not replace `state_path`, `turn-state`, or local evidence files; it only handles long-running continuation on the Codex side.
 
@@ -210,7 +210,7 @@ Runtime state now stays intentionally small:
 - `~/.codex/.helloagents/notify-state.json` for Codex-native closeout de-duplication only
 
 `STATE.md` only keeps the human-readable recovery snapshot. `runtime.json` is machine-only and keeps the minimal runtime state. `artifacts/*.json` stays limited to structured receipts. `events.jsonl` remains opt-in trace output and stays off by default.
-Project-local `STATE.md` is now materialized more lazily, and legacy root-level `.helloagents/artifacts/*.log` files are cleaned up automatically instead of growing as a second history system.
+Project-local `STATE.md` is now materialized more lazily.
 
 Standard runtime evidence and transient runtime state now expire after 72 hours. Long-running Codex goal flows still keep their 720-hour upper bound where the workflow explicitly needs it.
 
@@ -225,8 +225,10 @@ The CLI manages host files explicitly:
 - `update` refreshes the selected target or all targets
 - `cleanup` removes managed injections and links
 - `uninstall` performs scoped cleanup before package removal
-- `doctor` reports drift in carriers, links, hooks, config entries, plugin roots, cache copies, and versions; for Codex, it also surfaces native `codex doctor` output when available
+- `doctor` reports drift in carriers, links, hooks, config entries, plugin roots, cache copies, versions, and real Claude/Gemini global install artifacts; for Codex, it also surfaces native `codex doctor` output when available
+- Codex managed `notify = ["helloagents-js", "codex-notify"]` stays portable, and `doctor`, `cleanup`, and `uninstall` also recognize wrapped `--previous-notify` chains used by Codex App / Computer Use
 - per-host mode tracking is written only after host setup succeeds, and failed native global cleanup keeps the host tracked as `global` instead of silently layering standby on top
+- Windows `.cmd` / `.bat` lifecycle calls now run through an explicit command wrapper, so host installs, branch switching, and doctor flows do not emit Node `DEP0190` shell deprecation warnings
 
 ## Quick Start
 
@@ -313,7 +315,7 @@ If you omit `--standby` or `--global`, HelloAGENTS first reuses the tracked/dete
 
 Use these when you do not want to depend on the `helloagents` binary being available during package updates. In `HELLOAGENTS=target[:mode]`, target can be `all`, `claude`, `gemini`, or `codex`; mode can be `standby` or `global`. For install, an omitted mode is treated as `standby`. For update, cleanup, uninstall, and branch switching, an omitted mode is forwarded unchanged so HelloAGENTS can reuse the tracked or detected mode for that CLI first. If you do not provide `HELLOAGENTS`, the one-shot install scripts now behave like plain package install: they install or update the package only and do not auto-deploy any host CLI. For a custom tarball or package spec, set `HELLOAGENTS_PACKAGE` instead of `HELLOAGENTS_BRANCH`. For a guaranteed refresh of an already installed package, prefer `npm explore -g helloagents -- npm run sync-hosts -- ...` after the package command.
 
-Host configs use the stable `helloagents-js` entrypoint and runtime root `~/.helloagents/helloagents`, so Node global package paths can change without breaking managed hooks or Codex `notify`. Codex hooks use standalone `~/.codex/hooks.json` instead of adding large hook blocks to `config.toml`, and Codex global plugin roots plus plugin cache now link back to that same stable runtime root.
+Host configs use the stable `helloagents-js` entrypoint and runtime root `~/.helloagents/helloagents`, so Node global package paths can change without breaking managed hooks or Codex `notify`. Codex hooks use standalone `~/.codex/hooks.json` instead of adding large hook blocks to `config.toml`, and Codex global plugin roots plus plugin cache now link back to that same stable runtime root. Claude Code global installs now use a dedicated local marketplace projection under `~/.helloagents/host-projections/claude-marketplace`, and Gemini global extension packaging uses `~/.helloagents/host-projections/gemini`, so host-specific packaging stays isolated from the shared runtime root.
 
 #### npm commands
 
@@ -445,16 +447,16 @@ npm uninstall -g helloagents
 
 | CLI | Install method | Files involved |
 |-----|----------------|----------------|
-| Claude Code | native plugin install | managed by Claude Code plugin system |
-| Gemini CLI | native extension install | managed by Gemini extension system |
+| Claude Code | native plugin install | `~/.helloagents/host-projections/claude-marketplace`, Claude Code plugin metadata/cache managed by the host |
+| Gemini CLI | native extension install | `~/.helloagents/host-projections/gemini`, `~/.gemini/extensions/helloagents` |
 | Codex CLI | native local-plugin chain | `~/.agents/plugins/marketplace.json`, `~/plugins/helloagents/ -> ~/.helloagents/helloagents`, `~/.codex/plugins/cache/local-plugins/helloagents/local/ -> ~/.helloagents/helloagents`, `~/.codex/config.toml`, `~/.codex/hooks.json`, `~/.codex/helloagents -> ~/.helloagents/helloagents` |
 
-In global mode, HelloAGENTS now attempts the host-native install commands automatically. For Claude Code, the marketplace should be added from the Git URL so the plugin source stays on HTTPS and avoids an SSH-only clone during installation. If a host command is unavailable, run the same commands manually:
+In global mode, HelloAGENTS now attempts the host-native install commands automatically. Claude Code uses the local marketplace projection, Gemini uses the local extension projection, and Codex keeps linking back to the same stable runtime root, so install, update, branch switching, mode switching, cleanup, and uninstall all refresh against one consistent runtime copy. If a host command is unavailable, run the same commands manually:
 
 ```text
-/plugin marketplace add https://github.com/hellowind777/helloagents.git
+/plugin marketplace add "~/.helloagents/host-projections/claude-marketplace"
 /plugin install helloagents@helloagents
-helloagents install gemini --global
+gemini extensions link "~/.helloagents/host-projections/gemini"
 ```
 
 For Claude Code, the CLI also tries the equivalent `claude plugin marketplace add ...` and `claude plugin install ...` commands. The marketplace is named `helloagents`, and the plugin is also named `helloagents`, so the install target is `helloagents@helloagents`. Restart the host CLI after a global install.
@@ -652,15 +654,16 @@ Codex is rules-file driven by default.
 
 - standby writes `~/.codex/AGENTS.md`
 - standby writes a portable managed `model_instructions_file = "~/.codex/AGENTS.md"`
-- standby writes a managed `notify = ["helloagents-js", "codex-notify"]` command for closeout notification
+- standby writes a managed and portable `notify = ["helloagents-js", "codex-notify"]` command for closeout notification, so reinstalling, updating, or moving to another machine does not require rewriting an absolute path
 - standby writes silent Codex hooks to `~/.codex/hooks.json`
 - Codex `SessionStart` stays silent and reads the current `~/.helloagents/helloagents.json` at runtime instead of baking a config snapshot into `config.toml`, so first-turn and post-compaction settings stay current
 - install and update also sync HelloAGENTS-managed Codex hook trust state in `~/.codex/config.toml`, so Codex 0.129.0+ does not re-prompt for the managed hooks
 - that hook trust state is machine-local generated metadata derived from the current absolute `~/.codex/hooks.json` path; unlike `model_instructions_file = "~/.codex/AGENTS.md"`, it is not portable config and should be regenerated on each machine
 - standby creates `~/.codex/helloagents -> ~/.helloagents/helloagents`
 - global mode installs the native local-plugin chain, but keeps `~/.helloagents/helloagents` as the single managed runtime source by linking plugin roots, plugin cache, and `~/.codex/helloagents` back to it
+- `doctor`, `cleanup`, and `uninstall` also recognize wrapped notify chains such as `--previous-notify ["helloagents-js", "codex-notify"]`, so Codex App / Computer Use wrappers do not cause false drift reports or break notify restoration
 - for Codex app/plugin discovery, `global` is the native path; `standby` remains the lighter default for explicit project work
-- cleanup removes only the HelloAGENTS-managed hook trust entries and legacy managed notify residues, while keeping user-owned hook state untouched
+- cleanup removes only the HelloAGENTS-managed hook trust entries, while keeping user-owned hook state untouched
 - Codex hooks only synchronize runtime state and enforce Stop gates; they do not inject HelloAGENTS rules or route text through hook output
 - Codex closeout de-duplicates Stop hooks and native `codex-notify`, so one turn does not notify twice, and clientless delegated child-completion events stay silent when the managed Stop hook is active
 - `/goal` remains Codex-native. Enable it explicitly with `helloagents codex goals enable` when long-running plan execution is needed
@@ -678,10 +681,11 @@ npm test
 The current suite covers:
 
 - install, update, cleanup, uninstall, branch switching, and mode switching
+- Windows `.cmd` / `.bat` lifecycle dispatch without Node `DEP0190` warnings
 - one-shot shell and PowerShell lifecycle dispatch, plus wrapper env cleanup and mode-routing rules for install, update, cleanup, uninstall, and branch switching
 - Claude, Gemini, and Codex host integration behavior, including global-to-standby cleanup and failed native cleanup tracking
 - Codex managed `model_instructions_file`, `notify`, `hooks.json`, hook trust state, local plugin, marketplace, and cache behavior
-- Codex cleanup of legacy managed notify variants on Windows and canonical managed notify restoration rules
+- Codex cleanup and canonical managed notify restoration rules, including wrapped `--previous-notify` chains
 - Codex `/goal` feature toggles, long-running route context, and goal-aware command contracts
 - `helloagents doctor`
 - project storage and `repo-shared` behavior

package/README_CN.md

@@ -8,7 +8,7 @@
 
 **面向 AI 编码 CLI 的工作流层：技能、知识库、交付检查、更安全的配置写入，以及可恢复的执行流程。**
 
-[![Version](https://img.shields.io/badge/version-3.0.38-orange.svg)](./package.json)
+[![Version](https://img.shields.io/badge/version-3.1.1-orange.svg)](./package.json)
 [![npm](https://img.shields.io/npm/v/helloagents.svg)](https://www.npmjs.com/package/helloagents)
 [![Node](https://img.shields.io/badge/node-%3E%3D18-339933.svg)](./package.json)
 [![Skills](https://img.shields.io/badge/skills-14-6366f1.svg)](./skills)
@@ -189,7 +189,7 @@ HelloAGENTS 现在只从 `state_path` 解析当前状态文件：
 
 `<workspace>` 是当前 Git 分支、detached HEAD 的 `detached-<sha>`，或非 Git 项目的 `workspace`。`<session>` 是当前项目本地会话标识。`.helloagents/sessions/active.json` 只保留最近一次活跃的工作区/会话映射和 alias 桥接，这样同一个 CLI 会话会稳定落在同一个目录里，`/resume` 也能复用它。
 
-对于项目本地会话目录，HelloAGENTS 会优先使用稳定宿主标识，如 `sessionId`、`conversationId`、`threadId` 或 `HELLOAGENTS_NOTIFY_SESSION_ID`。如果宿主只能提供 `WT_SESSION`、`TERM_SESSION_ID`、`WINDOWID` 这类窗口或终端标识，HelloAGENTS 只把它们当作轻量 alias 桥接，并优先复用已映射的会话目录，而不是继续分裂出重复目录。
+对于项目本地会话目录，HelloAGENTS 会优先使用稳定宿主标识，如 `sessionId`、`conversationId`、`threadId` 或 `HELLOAGENTS_NOTIFY_SESSION_ID`。如果宿主只能提供 `WT_SESSION`、`TERM_SESSION_ID`、`WINDOWID` 这类窗口或终端标识，HelloAGENTS 只把它们当作轻量 alias 桥接，并优先复用已映射的会话目录，而不是继续分裂出重复目录。如果一个会话启动时还拿不到稳定宿主标识，HelloAGENTS 可以先落到 `default`，等同一个 CLI 会话后续拿到稳定标识时，仍继续复用这个活动目录，而不是再拆出第二个会话目录。
 
 `STATE.md` 只记录当前工作流做到哪里，不承担所有对话的统一记忆。Codex `/goal` 也不替代 `state_path`、`turn-state` 或本地证据文件；它只负责 Codex 侧的长程续跑。
 
@@ -210,7 +210,7 @@ HelloAGENTS 不把“命令通过”和“任务完成”简单画等号。交
 - 仅用于 Codex 原生收尾去重的 `~/.codex/.helloagents/notify-state.json`
 
 `STATE.md` 只保留给人看的恢复快照。`runtime.json` 只给机器用，只保存极少量运行态。`artifacts/*.json` 只保留结构化收据。`events.jsonl` 仍是可选 trace 输出，默认不写。
-项目本地 `STATE.md` 现在会更晚创建；旧版残留的项目根 `.helloagents/artifacts/*.log` 也会自动清理，不再继续充当第二套历史系统。
+项目本地 `STATE.md` 现在会更晚创建。
 
 标准运行态证据和临时运行态现在默认 72 小时过期。只有工作流明确需要的长程 Codex goal 链路，才继续保留 720 小时上限。
 
@@ -225,8 +225,10 @@ CLI 显式管理宿主文件：
 - `update` 刷新指定目标或全部目标
 - `cleanup` 删除受管注入和链接
 - `uninstall` 在移除包前执行对应清理
-- `doctor` 检查规则文件、链接、hooks、配置项、插件根目录、缓存副本和版本漂移；对 Codex 还会在可用时附带原生 `codex doctor` 结果
+- `doctor` 检查规则文件、链接、hooks、配置项、插件根目录、缓存副本、版本漂移，以及 Claude / Gemini 是否真的装上了全局插件或扩展；对 Codex 还会在可用时附带原生 `codex doctor` 结果
+- Codex 受管 `notify = ["helloagents-js", "codex-notify"]` 会继续保持可移植；`doctor`、`cleanup` 和 `uninstall` 也能识别 Codex App / Computer Use 使用的 `--previous-notify` 包装链
 - 单 CLI 模式记录只会在宿主安装成功后写入；如果原生全局清理失败，也会继续保留 `global` 记录，而不是悄悄叠加 standby
+- Windows 下的 `.cmd` / `.bat` 生命周期调用现在统一走显式命令包装，不再出现 Node `DEP0190` shell 弃用警告
 
 ## 快速开始
 
@@ -313,7 +315,7 @@ helloagents codex goals enable
 
 当你不想依赖更新过程中的 `helloagents` 可执行文件时，用 npm 或一键脚本。`HELLOAGENTS=目标[:模式]` 中，目标支持 `all`、`claude`、`gemini`、`codex`；模式支持 `standby`、`global`。用于安装时，省略模式按 `standby` 处理；用于更新、清理、卸载和切换分支时，省略模式会原样下传，让 HelloAGENTS 先复用该 CLI 已记录或检测到的模式。如果未提供 `HELLOAGENTS`，一键安装脚本现在会保持“只装包/只升级包”的默认语义，不会自动部署任何宿主 CLI。若要安装自定义 tarball 或包规格，用 `HELLOAGENTS_PACKAGE`，不要写 `HELLOAGENTS_BRANCH`。对于已经装好的包，如需确保宿主一定刷新，优先在包命令后显式执行一次 `npm explore -g helloagents -- npm run sync-hosts -- ...`。
 
-宿主配置使用稳定的 `helloagents-js` 入口和运行根目录 `~/.helloagents/helloagents`，Node 全局包路径变化不会破坏受管 hooks 或 Codex `notify`。Codex hooks 使用独立 `~/.codex/hooks.json`，不把大段配置写入 `config.toml`；Codex 全局插件根目录和插件缓存也会回链到这个稳定运行根目录。
+宿主配置使用稳定的 `helloagents-js` 入口和运行根目录 `~/.helloagents/helloagents`，Node 全局包路径变化不会破坏受管 hooks 或 Codex `notify`。Codex hooks 使用独立 `~/.codex/hooks.json`，不把大段配置写入 `config.toml`；Codex 全局插件根目录和插件缓存也会回链到这个稳定运行根目录。Claude Code 的 global 安装现在使用独立本地 marketplace 投影 `~/.helloagents/host-projections/claude-marketplace`，Gemini 的 global 扩展使用 `~/.helloagents/host-projections/gemini`，宿主专用打包链路不再污染共享运行根。
 
 #### npm 命令
 
@@ -445,16 +447,16 @@ npm uninstall -g helloagents
 
 | CLI | 安装方式 | 涉及文件 |
 |-----|----------|----------|
-| Claude Code | 原生插件安装 | 由 Claude Code 插件系统管理 |
-| Gemini CLI | 原生扩展安装 | 由 Gemini 扩展系统管理 |
+| Claude Code | 原生插件安装 | `~/.helloagents/host-projections/claude-marketplace`，以及由 Claude Code 宿主管理的插件元数据 / 缓存 |
+| Gemini CLI | 原生扩展安装 | `~/.helloagents/host-projections/gemini`、`~/.gemini/extensions/helloagents` |
 | Codex CLI | 原生本地插件流程 | `~/.agents/plugins/marketplace.json`、`~/plugins/helloagents/ -> ~/.helloagents/helloagents`、`~/.codex/plugins/cache/local-plugins/helloagents/local/ -> ~/.helloagents/helloagents`、`~/.codex/config.toml`、`~/.codex/hooks.json`、`~/.codex/helloagents -> ~/.helloagents/helloagents` |
 
-全局模式下，HelloAGENTS 会自动尝试宿主原生命令。对 Claude Code，marketplace 应使用 Git URL 添加，这样插件安装阶段会继续走 HTTPS，不会落回 SSH-only clone。若宿主命令不可用，再手动执行：
+全局模式下，HelloAGENTS 会自动尝试宿主原生命令。Claude Code 走本地 marketplace 投影，Gemini 走本地 extension 投影，Codex 继续回链同一个稳定运行根，因此安装、更新、切分支、切模式、清理和卸载都会围绕同一份运行时副本刷新。若宿主命令不可用，再手动执行：
 
 ```text
-/plugin marketplace add https://github.com/hellowind777/helloagents.git
+/plugin marketplace add "~/.helloagents/host-projections/claude-marketplace"
 /plugin install helloagents@helloagents
-helloagents install gemini --global
+gemini extensions link "~/.helloagents/host-projections/gemini"
 ```
 
 Claude Code 会自动尝试等价的 `claude plugin marketplace add ...` 和 `claude plugin install ...` 命令。marketplace 名称和插件名称都是 `helloagents`，所以安装目标是 `helloagents@helloagents`。全局安装后需要重启宿主 CLI。
@@ -656,15 +658,16 @@ Codex 默认走规则文件驱动。
 
 - 标准模式写入 `~/.codex/AGENTS.md`
 - 标准模式写入可移植的受管 `model_instructions_file = "~/.codex/AGENTS.md"`
-- 标准模式写入受管 `notify = ["helloagents-js", "codex-notify"]` 命令用于收尾通知
+- 标准模式写入受管且可移植的 `notify = ["helloagents-js", "codex-notify"]` 命令用于收尾通知，因此重装、更新或换电脑时都不需要改写绝对路径
 - 标准模式把静默 Codex hooks 写入 `~/.codex/hooks.json`
 - Codex 的 `SessionStart` 保持静默，并在运行时读取当前 `~/.helloagents/helloagents.json`，不会把配置快照固化进 `config.toml`，因此首次对话和上下文压缩后的设置都能保持最新
 - 安装和更新还会把 HelloAGENTS 受管的 Codex hook trust 状态同步到 `~/.codex/config.toml`，因此 Codex 0.129.0+ 不会再对这些受管 hooks 反复提示确认
 - 这些 hook trust 状态是基于当前机器 `~/.codex/hooks.json` 真实绝对路径生成的本机状态；它不同于 `model_instructions_file = "~/.codex/AGENTS.md"` 这类可移植配置，应在每台机器上重新生成
 - 标准模式创建 `~/.codex/helloagents -> ~/.helloagents/helloagents`
 - 全局模式安装原生本地插件流程，但仍把 `~/.helloagents/helloagents` 作为唯一受管运行时源；插件根目录、插件缓存和 `~/.codex/helloagents` 都会回链到它
+- `doctor`、`cleanup` 和 `uninstall` 也能识别 `--previous-notify ["helloagents-js", "codex-notify"]` 这类包装后的 notify 链，因此 Codex App / Computer Use 不会再触发误报或破坏 notify 恢复
 - 如果你主要看重 Codex app / 插件发现链路，优先使用 `global`；如果你主要看重更轻量、更显式的项目工作流，保留 `standby`
-- 清理时只删除 HelloAGENTS 自己写入的 hook trust 条目和旧式受管 notify 残留，不影响用户已有的 hook 状态
+- 清理时只删除 HelloAGENTS 自己写入的 hook trust 条目，不影响用户已有的 hook 状态
 - Codex hooks 只做静默运行态同步和 Stop 门禁，不通过 hook 注入 HelloAGENTS 规则或路由说明
 - Codex 收尾会对 Stop hook 和原生 `codex-notify` 去重，避免同一轮重复通知；受管 Stop hook 生效时，client 为空的委派子任务完成事件也会保持静默
 - `/goal` 保持 Codex 原生能力；需要长程执行时，用 `helloagents codex goals enable` 显式启用
@@ -682,10 +685,11 @@ npm test
 当前测试覆盖：
 
 - 安装、更新、清理、卸载、分支切换和模式切换
+- Windows `.cmd` / `.bat` 生命周期分发链路，且不再出现 Node `DEP0190` 警告
 - shell 与 PowerShell 一键脚本分发链路，以及包装脚本在安装、更新、清理、卸载和分支切换中的环境清理与模式传递规则
 - Claude、Gemini、Codex 的宿主集成行为，包括全局切回标准模式的清理和原生清理失败时的模式保留
 - Codex 受管 `model_instructions_file`、`notify`、`hooks.json`、hook trust 状态、本地插件、marketplace 和缓存行为
-- Windows 下 Codex 旧式受管 notify 变体的清理，以及受管 notify 恢复规则
+- Codex 清理链路，以及包括 wrapped `--previous-notify` 在内的受管 notify 恢复规则
 - Codex `/goal` 功能开关、长程路由上下文和 goal 感知命令契约
 - `helloagents doctor`
 - 项目存储和 `repo-shared`

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "helloagents",
-  "version": "3.0.38",
+  "version": "3.1.1",
   "description": "Quality-driven orchestration kernel for AI CLIs",
   "contextFileName": "bootstrap.md",
   "author": "HelloWind",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "helloagents",
-  "version": "3.0.38",
+  "version": "3.1.1",
   "type": "module",
   "description": "HelloAGENTS — The orchestration kernel that makes any AI CLI smarter. Adds intelligent routing, unified QA gates, safety guards, and notifications.",
   "author": "HelloWind",

package/scripts/cli-branch.mjs

@@ -1,15 +1,12 @@
-import { spawnSync } from 'node:child_process'
-
 import { normalizeHost } from './cli-lifecycle.mjs'
+import { spawnCommandSync } from './cli-process.mjs'
 
 const DEFAULT_REPO_ARCHIVE_BASE = 'https://github.com/hellowind777/helloagents/archive/refs/heads'
 
 function runCommand(command, args) {
-  const needsShell = process.platform === 'win32' && /\.cmd$/i.test(command)
-  const result = spawnSync(command, args, {
+  const result = spawnCommandSync(command, args, {
     encoding: 'utf-8',
     errors: 'replace',
-    shell: needsShell,
     stdio: 'inherit',
     windowsHide: true,
   })

package/scripts/cli-codex-config.mjs

@@ -13,13 +13,8 @@ export const CODEX_MANAGED_TOML_COMMENT = '# helloagents-managed'
 export const CODEX_MANAGED_MODEL_INSTRUCTIONS_PATH = '~/.codex/AGENTS.md'
 export const CODEX_MANAGED_NOTIFY_COMMAND = 'helloagents-js'
 export const CODEX_MANAGED_NOTIFY_VALUE = `["${CODEX_MANAGED_NOTIFY_COMMAND}", "codex-notify"]`
-const CODEX_MANAGED_NOTIFY_LEGACY_VALUES = [
-  `["${CODEX_MANAGED_NOTIFY_COMMAND}.cmd", "codex-notify"]`,
-  `["${CODEX_MANAGED_NOTIFY_COMMAND}.exe", "codex-notify"]`,
-]
 export const CODEX_MANAGED_TUI_NOTIFICATIONS_VALUE = '["plan-mode-prompt"]'
 export const CODEX_HOOKS_FEATURE_KEY = 'hooks'
-export const CODEX_LEGACY_HOOKS_FEATURE_KEY = 'codex_hooks'
 export const CODEX_GOALS_FEATURE_KEY = 'goals'
 export const CODEX_MANAGED_GOALS_FEATURE_LINE = `${CODEX_GOALS_FEATURE_KEY} = true ${CODEX_MANAGED_TOML_COMMENT}`
 export const CODEX_MANAGED_GOALS_DISABLED_LINE = `${CODEX_GOALS_FEATURE_KEY} = false ${CODEX_MANAGED_TOML_COMMENT}`
@@ -29,6 +24,155 @@ function normalizePath(value = '') {
   return String(value || '').replace(/\\/g, '/')
 }
 
+function isManagedCodexNotifyParts(parts) {
+  return Array.isArray(parts)
+    && parts.length === 2
+    && parts[0] === CODEX_MANAGED_NOTIFY_COMMAND
+    && parts[1] === 'codex-notify'
+}
+
+function extractTomlArrayLiteral(text = '') {
+  const source = String(text || '')
+  const equalsIndex = source.indexOf('=')
+  let quoted = false
+  let escaped = false
+  let commented = false
+  let depth = 0
+  let start = -1
+
+  for (let index = equalsIndex >= 0 ? equalsIndex + 1 : 0; index < source.length; index += 1) {
+    const char = source[index]
+
+    if (commented) {
+      if (char === '\n') commented = false
+      continue
+    }
+    if (escaped) {
+      escaped = false
+      continue
+    }
+    if (char === '\\' && quoted) {
+      escaped = true
+      continue
+    }
+    if (char === '"') {
+      quoted = !quoted
+      continue
+    }
+    if (quoted) continue
+    if (char === '#') {
+      commented = true
+      continue
+    }
+    if (char === '[') {
+      if (depth === 0) start = index
+      depth += 1
+      continue
+    }
+    if (char === ']' && depth > 0) {
+      depth -= 1
+      if (depth === 0 && start >= 0) return source.slice(start, index + 1)
+    }
+  }
+
+  return ''
+}
+
+function parseTomlStringArrayLiteral(literal = '') {
+  const source = String(literal || '').trim()
+  if (!source.startsWith('[') || !source.endsWith(']')) return null
+
+  const items = []
+  let quoted = false
+  let escaped = false
+  let tokenStart = -1
+
+  for (let index = 1; index < source.length; index += 1) {
+    const char = source[index]
+
+    if (quoted) {
+      if (escaped) {
+        escaped = false
+        continue
+      }
+      if (char === '\\') {
+        escaped = true
+        continue
+      }
+      if (char === '"') {
+        try {
+          items.push(JSON.parse(source.slice(tokenStart, index + 1)))
+        } catch {
+          return null
+        }
+        quoted = false
+        tokenStart = -1
+      }
+      continue
+    }
+
+    if (char === '#') {
+      while (index < source.length && source[index] !== '\n') index += 1
+      continue
+    }
+    if (/\s|,/.test(char)) continue
+    if (char === ']') return items
+    if (char !== '"') return null
+
+    quoted = true
+    tokenStart = index
+  }
+
+  return null
+}
+
+function analyzeNotifyCommandParts(parts = []) {
+  if (isManagedCodexNotifyParts(parts)) {
+    return {
+      managed: true,
+      shape: 'direct',
+      containsCodexNotify: true,
+      entrypoint: [...parts],
+      wrapper: '',
+      rawCommand: [...parts],
+    }
+  }
+
+  let containsCodexNotify = parts.includes('codex-notify')
+  for (let index = 0; index < parts.length - 1; index += 1) {
+    if (parts[index] !== '--previous-notify') continue
+
+    try {
+      const nested = JSON.parse(parts[index + 1])
+      if (!Array.isArray(nested) || !nested.every((entry) => typeof entry === 'string')) continue
+
+      const nestedAnalysis = analyzeNotifyCommandParts(nested)
+      containsCodexNotify = containsCodexNotify || nestedAnalysis.containsCodexNotify
+      if (!nestedAnalysis.managed) continue
+
+      return {
+        managed: true,
+        shape: 'chained',
+        containsCodexNotify: true,
+        entrypoint: [...nestedAnalysis.entrypoint],
+        wrapper: parts[0] || '',
+        rawCommand: [...parts],
+      }
+    } catch {
+      continue
+    }
+  }
+
+  return {
+    managed: false,
+    shape: parts.length ? 'external' : 'invalid',
+    containsCodexNotify,
+    entrypoint: [],
+    wrapper: '',
+    rawCommand: [...parts],
+  }
+}
+
 function splitTomlLines(text = '') {
   return String(text || '').replace(/\r\n/g, '\n').split('\n')
 }
@@ -105,10 +249,6 @@ export function readCodexHooksFeatureLine(text) {
   return readCodexFeatureLine(text, CODEX_HOOKS_FEATURE_KEY)
 }
 
-export function readLegacyCodexHooksFeatureLine(text) {
-  return readCodexFeatureLine(text, CODEX_LEGACY_HOOKS_FEATURE_KEY)
-}
-
 export function readCodexGoalsFeatureLine(text) {
   return readCodexFeatureLine(text, CODEX_GOALS_FEATURE_KEY)
 }
@@ -146,15 +286,6 @@ export function removeCodexGoalsFeatureConfig(text) {
   )
 }
 
-export function removeLegacyManagedCodexHooksFeatureConfig(text) {
-  return removeTomlSectionLine(
-    text,
-    CODEX_FEATURES_HEADER,
-    CODEX_LEGACY_HOOKS_FEATURE_KEY,
-    isManagedLegacyCodexHooksFeature,
-  )
-}
-
 export function restoreCodexGoalsFeatureConfig(text, { codexGoalsLine = '' } = {}) {
   if (!codexGoalsLine) return normalizeToml(text)
   return upsertTomlSectionLine(
@@ -173,10 +304,44 @@ export function isManagedCodexModelInstruction(line = '') {
 export function isManagedCodexNotify(line = '') {
   const value = String(line || '').replace(/\\/g, '/')
   return value.includes(CODEX_MANAGED_TOML_COMMENT)
-    && (
-      value.includes(CODEX_MANAGED_NOTIFY_VALUE)
-      || CODEX_MANAGED_NOTIFY_LEGACY_VALUES.some((entry) => value.includes(entry))
-    )
+    && value.includes(CODEX_MANAGED_NOTIFY_VALUE)
+}
+
+export function analyzeCodexNotifyBlock(block = '') {
+  const source = String(block || '').trim()
+  if (!source) {
+    return {
+      exists: false,
+      managed: false,
+      containsCodexNotify: false,
+      shape: 'missing',
+      entrypoint: [],
+      wrapper: '',
+      rawCommand: [],
+      rawBlock: '',
+    }
+  }
+
+  const literal = extractTomlArrayLiteral(source)
+  const parts = literal ? parseTomlStringArrayLiteral(literal) : null
+  if (!parts) {
+    return {
+      exists: true,
+      managed: false,
+      containsCodexNotify: source.includes('codex-notify'),
+      shape: 'invalid',
+      entrypoint: [],
+      wrapper: '',
+      rawCommand: [],
+      rawBlock: source,
+    }
+  }
+
+  return {
+    exists: true,
+    ...analyzeNotifyCommandParts(parts),
+    rawBlock: source,
+  }
 }
 
 export function isManagedCodexTuiNotifications(line = '') {
@@ -193,10 +358,6 @@ export function isManagedCodexHooksFeature(line = '') {
   return isManagedFeatureLine(line, CODEX_HOOKS_FEATURE_KEY)
 }
 
-export function isManagedLegacyCodexHooksFeature(line = '') {
-  return isManagedFeatureLine(line, CODEX_LEGACY_HOOKS_FEATURE_KEY)
-}
-
 export function isManagedCodexGoalsFeature(line = '') {
   return isManagedFeatureLine(line, CODEX_GOALS_FEATURE_KEY)
 }

package/scripts/cli-codex.mjs

@@ -8,6 +8,7 @@ import {
 } from './cli-utils.mjs';
 import { ensureTimestampedBackup, readCodexBackup, removeCodexBackup } from './cli-codex-backup.mjs';
 import {
+  analyzeCodexNotifyBlock,
   CODEX_MANAGED_TOML_COMMENT,
   CODEX_MANAGED_MODEL_INSTRUCTIONS_PATH,
   CODEX_PLUGIN_CONFIG_HEADER,
@@ -17,12 +18,9 @@ import {
   isManagedCodexGoalsFeature,
   isManagedCodexModelInstruction,
   isManagedCodexNotify,
-  isManagedLegacyCodexHooksFeature,
   readCodexGoalsFeatureLine,
-  readLegacyCodexHooksFeatureLine,
   removeCodexGoalsFeatureConfig,
   removeCodexManagedTuiConfig,
-  removeLegacyManagedCodexHooksFeatureConfig,
   removeCodexPluginConfig,
   restoreCodexGoalsFeatureConfig,
   restoreCodexTopLevelConfig,
@@ -33,8 +31,10 @@ import {
   syncManagedCodexHookTrust,
 } from './cli-codex-hooks-state.mjs';
 import {
+  hasTopLevelTomlBlock,
   readTopLevelTomlLine,
   readTopLevelTomlBlock,
+  removeTopLevelTomlBlock,
   removeTopLevelTomlLines,
 } from './cli-toml.mjs';
 import { buildRuntimeCarrier, readCarrierSettings } from './cli-runtime-carrier.mjs';
@@ -156,12 +156,11 @@ function cleanupCodexManagedConfig(configPath, { removePluginConfig = false } =
   const currentModelInstructions = readTopLevelTomlLine(toml, 'model_instructions_file');
   const currentNotify = readTopLevelTomlBlock(toml, 'notify');
   const currentCodexGoalsFeature = readCodexGoalsFeatureLine(toml);
-  const currentLegacyCodexHooksFeature = readLegacyCodexHooksFeatureLine(toml);
+  const currentNotifyAnalysis = analyzeCodexNotifyBlock(currentNotify);
 
   const shouldRestoreModelInstructions = isManagedCodexModelInstruction(currentModelInstructions);
-  const shouldRestoreNotify = isManagedCodexNotify(currentNotify);
+  const shouldRestoreNotify = currentNotifyAnalysis.managed || isManagedCodexNotify(currentNotify);
   const shouldRestoreCodexGoalsFeature = isManagedCodexGoalsFeature(currentCodexGoalsFeature);
-  const shouldRemoveLegacyCodexHooksFeature = isManagedLegacyCodexHooksFeature(currentLegacyCodexHooksFeature);
 
   if (removePluginConfig) {
     toml = removeCodexPluginConfig(toml);
@@ -170,16 +169,15 @@ function cleanupCodexManagedConfig(configPath, { removePluginConfig = false } =
     toml = removeCodexGoalsFeatureConfig(toml);
   }
   toml = removeCodexManagedTuiConfig(toml);
-  if (shouldRemoveLegacyCodexHooksFeature) {
-    toml = removeLegacyManagedCodexHooksFeatureConfig(toml);
-  }
   if (shouldRestoreModelInstructions) {
     toml = removeTopLevelTomlLines(toml, (line) =>
       line.startsWith('model_instructions_file =') && isManagedCodexModelInstruction(line)).text;
   }
   if (shouldRestoreNotify) {
-    toml = removeTopLevelTomlLines(toml, (line) =>
-      line.startsWith('notify =') && isManagedCodexNotify(line)).text;
+    toml = hasTopLevelTomlBlock(toml, 'notify')
+      ? removeTopLevelTomlBlock(toml, 'notify')
+      : removeTopLevelTomlLines(toml, (line) =>
+        line.startsWith('notify =')).text;
   }
 
   const backupModelInstructions = readTopLevelTomlLine(backupToml, 'model_instructions_file');
@@ -190,7 +188,7 @@ function cleanupCodexManagedConfig(configPath, { removePluginConfig = false } =
     modelInstructionsLine: shouldRestoreModelInstructions && !isManagedCodexBackupInstruction(backupModelInstructions)
       ? backupModelInstructions
       : '',
-    notifyLine: shouldRestoreNotify && !isManagedCodexNotify(backupNotify)
+    notifyLine: shouldRestoreNotify && !analyzeCodexNotifyBlock(backupNotify).managed
       ? backupNotify
       : '',
   });
@@ -220,7 +218,6 @@ export function installCodexStandby(home, pkgRoot) {
     modelInstructionsPath: CODEX_MANAGED_MODEL_INSTRUCTIONS_PATH,
   });
   toml = installCodexManagedTuiConfig(toml);
-  toml = removeLegacyManagedCodexHooksFeatureConfig(toml);
   safeWrite(configPath, toml);
   installCodexStandaloneHooks(home, pkgRoot);
 
@@ -312,7 +309,6 @@ export function installCodexGlobal(home, pkgRoot) {
     modelInstructionsPath: CODEX_MANAGED_MODEL_INSTRUCTIONS_PATH,
   });
   toml = installCodexManagedTuiConfig(toml);
-  toml = removeLegacyManagedCodexHooksFeatureConfig(toml);
   toml = upsertCodexPluginConfig(toml);
   safeWrite(configPath, toml);
   installCodexStandaloneHooks(home, pkgRoot);