holycodex 0.10.2 → 0.10.3

package/README.md

@@ -9,4 +9,8 @@ bunx holycodex@dev doctor
 
 Use `holycodex --help` for commands, autonomy options, and service tiers. `--fast` selects the fast tier; `--no-fast` or omitting both tier flags selects the default. Stable releases use `bunx holycodex`; development releases use npm's `dev` dist-tag.
 
+Default and `--no-codex-autonomous` installs use Codex Approve for me semantics: `approval_policy = "on-request"`, `approvals_reviewer = "auto_review"`, and `sandbox_mode = "workspace-write"`. Autonomous modes omit the reviewer and retain their documented sandbox behavior. The optional `holycodex-config` permission profile remains available without forcing `default_permissions`, so users may select Full access or another profile.
+
+Install also attempts to add or enable the official `codex-security@openai-curated` plugin through structured Codex CLI commands. External availability failures are non-fatal and reported in human and JSON results. Cleanup leaves this independent official plugin installed. Build Web Apps remains separately managed by Codex.
+
 Repository, documentation, license, and security notices: https://github.com/davidbasilefilho/holycodex

package/dist/cli.js

@@ -614,6 +614,7 @@ var string$1 = (params) => {
 };
 var integer = /^-?\d+$/;
 var number$1 = /^-?\d+(?:\.\d+)?$/;
+var boolean$1 = /^(?:true|false)$/i;
 var lowercase = /^[^A-Z]*$/;
 var uppercase = /^[^a-z]*$/;
 //#endregion
@@ -1408,6 +1409,24 @@ var $ZodNumberFormat = /*@__PURE__*/ $constructor("$ZodNumberFormat", (inst, def
 	$ZodCheckNumberFormat.init(inst, def);
 	$ZodNumber.init(inst, def);
 });
+var $ZodBoolean = /*@__PURE__*/ $constructor("$ZodBoolean", (inst, def) => {
+	$ZodType.init(inst, def);
+	inst._zod.pattern = boolean$1;
+	inst._zod.parse = (payload, _ctx) => {
+		if (def.coerce) try {
+			payload.value = Boolean(payload.value);
+		} catch (_) {}
+		const input = payload.value;
+		if (typeof input === "boolean") return payload;
+		payload.issues.push({
+			expected: "boolean",
+			code: "invalid_type",
+			input,
+			inst
+		});
+		return payload;
+	};
+});
 var $ZodUnknown = /*@__PURE__*/ $constructor("$ZodUnknown", (inst, def) => {
 	$ZodType.init(inst, def);
 	inst._zod.parse = (payload) => payload;
@@ -2623,6 +2642,13 @@ function _int(Class, params) {
 	});
 }
 // @__NO_SIDE_EFFECTS__
+function _boolean(Class, params) {
+	return new Class({
+		type: "boolean",
+		...normalizeParams(params)
+	});
+}
+// @__NO_SIDE_EFFECTS__
 function _unknown(Class) {
 	return new Class({ type: "unknown" });
 }
@@ -3168,6 +3194,9 @@ var numberProcessor = (schema, ctx, _json, _params) => {
 	else if (typeof maximum === "number") json.maximum = maximum;
 	if (typeof multipleOf === "number") json.multipleOf = multipleOf;
 };
+var booleanProcessor = (_schema, _ctx, json, _params) => {
+	json.type = "boolean";
+};
 var neverProcessor = (_schema, _ctx, json, _params) => {
 	json.not = {};
 };
@@ -3851,6 +3880,14 @@ var ZodNumberFormat = /*@__PURE__*/ $constructor("ZodNumberFormat", (inst, def)
 function int(params) {
 	return /* @__PURE__ */ _int(ZodNumberFormat, params);
 }
+var ZodBoolean = /*@__PURE__*/ $constructor("ZodBoolean", (inst, def) => {
+	$ZodBoolean.init(inst, def);
+	ZodType.init(inst, def);
+	inst._zod.processJSONSchema = (ctx, json, params) => booleanProcessor(inst, ctx, json, params);
+});
+function boolean(params) {
+	return /* @__PURE__ */ _boolean(ZodBoolean, params);
+}
 var ZodUnknown = /*@__PURE__*/ $constructor("ZodUnknown", (inst, def) => {
 	$ZodUnknown.init(inst, def);
 	ZodType.init(inst, def);
@@ -4252,7 +4289,7 @@ function superRefine(fn, params) {
 }
 //#endregion
 //#region packages/cli/src/catalog.ts
-var VERSION = "0.10.2";
+var VERSION = "0.10.3";
 var SKILLS = [
 	"ast-grep",
 	"caveman",
@@ -4804,17 +4841,46 @@ var defaultManagedProcessRuntime = {
 /** Runs managed process. */
 async function runManagedProcess(input, runtime = defaultManagedProcessRuntime) {
 	return await new Promise((resolve) => {
-		const child = spawn(input.command, [...input.args], {
-			...input.cwd === void 0 ? {} : { cwd: input.cwd },
-			...input.env === void 0 ? {} : { env: input.env },
-			stdio: [
-				"pipe",
-				"pipe",
-				"pipe"
-			],
-			windowsHide: true,
-			detached: input.platform !== "win32"
-		});
+		let child;
+		try {
+			child = (runtime.spawnChild ?? spawn)(input.command, [...input.args], {
+				...input.cwd === void 0 ? {} : { cwd: input.cwd },
+				...input.env === void 0 ? {} : { env: input.env },
+				stdio: [
+					"pipe",
+					"pipe",
+					"pipe"
+				],
+				windowsHide: true,
+				detached: input.platform !== "win32"
+			});
+		} catch (error) {
+			resolve({
+				exitCode: null,
+				stdout: "",
+				stderr: "",
+				timedOut: false,
+				matched: false,
+				outputTruncated: false,
+				error: error instanceof Error ? error.message : String(error)
+			});
+			return;
+		}
+		const childStdin = child.stdin;
+		const childStdout = child.stdout;
+		const childStderr = child.stderr;
+		if (childStdin === null || childStdout === null || childStderr === null) {
+			resolve({
+				exitCode: null,
+				stdout: "",
+				stderr: "",
+				timedOut: false,
+				matched: false,
+				outputTruncated: false,
+				error: "Managed process did not expose piped standard streams."
+			});
+			return;
+		}
 		let stdout = {
 			head: "",
 			tail: "",
@@ -4859,11 +4925,11 @@ async function runManagedProcess(input, runtime = defaultManagedProcessRuntime)
 				terminate();
 			}
 		};
-		child.stdout.on("data", (chunk) => {
+		childStdout.on("data", (chunk) => {
 			stdout = appendOutput(stdout, chunk.toString(), input.maxOutputChars);
 			inspectMatch();
 		});
-		child.stderr.on("data", (chunk) => {
+		childStderr.on("data", (chunk) => {
 			stderr = appendOutput(stderr, chunk.toString(), input.maxOutputChars);
 			inspectMatch();
 		});
@@ -4874,8 +4940,8 @@ async function runManagedProcess(input, runtime = defaultManagedProcessRuntime)
 			terminate();
 		}, input.timeoutMs);
 		timeout.unref();
-		if (input.stdin === void 0) child.stdin.end();
-		else child.stdin.end(input.stdin);
+		if (input.stdin === void 0) childStdin.end();
+		else childStdin.end(input.stdin);
 	});
 }
 /** Terminates process tree. */
@@ -5167,8 +5233,8 @@ function installConfig(input, mode, _platform, plan = DEFAULT_PLAN, maxSubagents
 	const tables = firstTable < 0 ? "" : base.slice(firstTable);
 	const controlled = [
 		"approval_policy",
+		"approvals_reviewer",
 		"sandbox_mode",
-		"default_permissions",
 		"max_concurrent_threads_per_session",
 		"status_line",
 		"model_verbosity",
@@ -5176,8 +5242,8 @@ function installConfig(input, mode, _platform, plan = DEFAULT_PLAN, maxSubagents
 	].map((key) => rootValue(root, key));
 	const preservedRoot = [
 		"approval_policy",
+		"approvals_reviewer",
 		"sandbox_mode",
-		"default_permissions",
 		"max_concurrent_threads_per_session",
 		"status_line",
 		"model_verbosity",
@@ -5191,9 +5257,10 @@ function installConfig(input, mode, _platform, plan = DEFAULT_PLAN, maxSubagents
 	const model = hasModel ? "" : `model = "${rootRoute.model}"\n`;
 	const effort = hasEffort ? "" : `model_reasoning_effort = "${rootRoute.reasoningEffort}"\n`;
 	const approval = mode === "default" ? "on-request" : "never";
+	const approvalsReviewer = mode === "default" ? "approvals_reviewer = \"auto_review\"\n" : "";
 	const sandbox = mode === "dangerous" ? "danger-full-access" : "workspace-write";
 	const original = originalControlled ? `${ORIGINAL_ROOT}${Buffer.from(originalControlled).toString("base64")}\n` : "";
-	const rootBlock = `${START}\n${PLAN_PREFIX}${plan}\n${FAST_MODE_PREFIX}${fastMode}\n${maxSubagents === void 0 ? "" : `${MAX_SUBAGENTS_PREFIX}${maxSubagents}\n`}${original}${model}${effort}model_verbosity = "low"\nservice_tier = "${fastMode === "fast-all" ? "fast" : "default"}"\napproval_policy = "${approval}"\nsandbox_mode = "${sandbox}"\ndefault_permissions = "${MANAGED_PERMISSION_PROFILE}"\nstatus_line = ${mergedStatusLine(rootValue(root, "status_line"))}\n${END}`;
+	const rootBlock = `${START}\n${PLAN_PREFIX}${plan}\n${FAST_MODE_PREFIX}${fastMode}\n${maxSubagents === void 0 ? "" : `${MAX_SUBAGENTS_PREFIX}${maxSubagents}\n`}${original}${model}${effort}model_verbosity = "low"\nservice_tier = "${fastMode === "fast-all" ? "fast" : "default"}"\napproval_policy = "${approval}"\n${approvalsReviewer}sandbox_mode = "${sandbox}"\nstatus_line = ${mergedStatusLine(rootValue(root, "status_line"))}\n${END}`;
 	let configured = `${preservedRoot ? `${preservedRoot}\n` : ""}${rootBlock}${tables ? `\n\n${tables}` : ""}`;
 	configured = injectTableKeys(configured, `permissions.${MANAGED_PERMISSION_PROFILE}`, [["description", "\"HolyCodex config.toml permissions.\""], ["extends", "\":workspace\""]]);
 	configured = injectTableKeys(configured, `permissions.${MANAGED_PERMISSION_PROFILE}.network`, [["enabled", "true"]]);
@@ -5309,11 +5376,12 @@ function tableInteger(config, table, key) {
 }
 function autonomy(config) {
 	const approval = rootTomlString(config, "approval_policy");
+	const approvalsReviewer = rootTomlString(config, "approvals_reviewer");
 	const sandbox = rootTomlString(config, "sandbox_mode");
 	const network = tableBoolean(config, "sandbox_workspace_write", "network_access");
-	if (approval === "on-request" && sandbox === "workspace-write" && network === true) return "safe-workspace";
-	if (approval === "never" && sandbox === "workspace-write" && network === true) return "autonomous-workspace";
-	if (approval === "never" && sandbox === "danger-full-access") return "dangerous";
+	if (approval === "on-request" && approvalsReviewer === "auto_review" && sandbox === "workspace-write" && network === true) return "safe-workspace";
+	if (approval === "never" && approvalsReviewer === void 0 && sandbox === "workspace-write" && network === true) return "autonomous-workspace";
+	if (approval === "never" && approvalsReviewer === void 0 && sandbox === "danger-full-access") return "dangerous";
 	return "unknown";
 }
 /** Runs HolyCodex installation and environment health checks. */
@@ -5396,7 +5464,7 @@ async function doctor(home = process.env.CODEX_HOME ?? join(homedir(), ".codex")
 	checks.push(["default", "fast"].includes(rootTomlString(config, "service_tier") ?? "") && (managedFastMode === void 0 || rootTomlString(config, "service_tier") === (managedFastMode === "fast-all" ? "fast" : "default")) ? check("service-tier", "ok", "service-tier-ready", "Codex service tier is explicitly managed.") : check("service-tier", "error", "service-tier-stale", "service_tier does not match the managed Fast mode.", "Reinstall HolyCodex with --fast, --fast-all, or --no-fast."));
 	checks.push(rootTomlString(config, "model_verbosity") === "low" ? check("root-verbosity", "ok", "root-verbosity-ready", "Root model verbosity is forced to low.") : check("root-verbosity", "error", "root-verbosity-stale", "Root model verbosity must be low.", "Reinstall HolyCodex."));
 	checks.push(preset === void 0 || expectedMaxSubagents === void 0 || tableInteger(config, "agents", "max_threads") !== expectedMaxSubagents + 1 || tableInteger(config, "agents", "max_depth") !== preset.usage.maxDepth ? check("agent-usage", "error", "agent-usage-stale", "Agent concurrency configuration does not match the selected routing plan or explicit override.", "Reinstall HolyCodex.") : check("agent-usage", "ok", "agent-usage-ready", `Agent concurrency allows ${expectedMaxSubagents} direct subagent${expectedMaxSubagents === 1 ? "" : "s"}.`));
-	checks.push(mode === "unknown" ? check("autonomy", "error", "invalid-autonomy-config", "Approval, sandbox, and network settings do not match a supported mode.", "Rerun install with the intended autonomy flag.") : mode === "dangerous" ? check("autonomy", "warning", "dangerous-autonomy", "Explicit dangerous autonomy is active; workspace containment is removed.") : check("autonomy", "ok", `${mode}-ready`, mode === "safe-workspace" ? "Safe workspace autonomy is active." : "Approval-free workspace autonomy is active."));
+	checks.push(mode === "unknown" ? check("autonomy", "error", "invalid-autonomy-config", "Approval policy, approval reviewer, sandbox, and network settings do not match a supported mode.", "Rerun install with the intended autonomy flag.") : mode === "dangerous" ? check("autonomy", "warning", "dangerous-autonomy", "Explicit dangerous autonomy is active; workspace containment is removed.") : check("autonomy", "ok", `${mode}-ready`, mode === "safe-workspace" ? "Safe workspace autonomy is active." : "Approval-free workspace autonomy is active."));
 	checks.push(tableBoolean(config, "features", "default_mode_request_user_input") === true ? check("user-input", "ok", "user-input-ready", "default_mode_request_user_input is enabled.") : check("user-input", "error", "user-input-disabled", "default_mode_request_user_input is not enabled.", "Rerun holycodex install."));
 	checks.push(tableStringArray(config, "desktop", "enabled-reasoning-efforts")?.join(",") === "low,medium,high" ? check("desktop-reasoning", "ok", "desktop-reasoning-ready", "Desktop exposes low, medium, and high reasoning efforts.") : check("desktop-reasoning", "error", "desktop-reasoning-stale", "Desktop reasoning choices must be low, medium, and high.", "Reinstall HolyCodex."));
 	checks.push(tableBoolean(config, "desktop", "show-context-window-usage") === true ? check("desktop-context-usage", "ok", "desktop-context-usage-ready", "Desktop context-window usage is visible.") : check("desktop-context-usage", "error", "desktop-context-usage-hidden", "Desktop context-window usage is not enabled.", "Reinstall HolyCodex."));
@@ -5424,6 +5492,156 @@ async function doctor(home = process.env.CODEX_HOME ?? join(homedir(), ".codex")
 	};
 }
 //#endregion
+//#region packages/cli/src/codex-security.ts
+var CODEX_SECURITY_PLUGIN = "codex-security@openai-curated";
+var CODEX_PLUGIN_TIMEOUT_MS = 2e4;
+var MAX_CODEX_OUTPUT_CHARS = 64 * 1024;
+var PluginEntrySchema = looseObject({
+	pluginId: string(),
+	installed: boolean().optional(),
+	enabled: boolean().optional()
+});
+var PluginListSchema = looseObject({
+	installed: array(PluginEntrySchema),
+	available: array(PluginEntrySchema)
+});
+var PluginAddSchema = looseObject({ pluginId: string() });
+/** Installs or enables the official Codex Security plugin without failing HolyCodex installation. */
+async function installCodexSecurity(runProcess = runManagedProcess, platform = process.platform, env = process.env) {
+	const listed = await runCodexPlugin(runProcess, [
+		"plugin",
+		"list",
+		"--available",
+		"--json"
+	], platform, env);
+	const listFailure = externalFailure(listed);
+	if (listFailure !== void 0) return listFailure;
+	const parsedList = parseJson(listed.stdout, PluginListSchema);
+	if (parsedList === void 0) return skipped("invalid-response");
+	const installed = parsedList.installed.find((plugin) => plugin.pluginId === CODEX_SECURITY_PLUGIN);
+	if (installed?.installed === true && installed.enabled === true) return { status: "already-installed" };
+	const wasDisabled = installed?.installed === true;
+	const available = parsedList.available.some((plugin) => plugin.pluginId === CODEX_SECURITY_PLUGIN);
+	if (!wasDisabled && !available) return skipped("plugin-unavailable");
+	const added = await runCodexPlugin(runProcess, [
+		"plugin",
+		"add",
+		CODEX_SECURITY_PLUGIN,
+		"--json"
+	], platform, env);
+	const addFailure = externalFailure(added);
+	if (addFailure !== void 0) return addFailure;
+	if (parseJson(added.stdout, PluginAddSchema)?.pluginId !== CODEX_SECURITY_PLUGIN) return skipped("invalid-response");
+	return { status: wasDisabled ? "enabled" : "installed" };
+}
+async function runCodexPlugin(runProcess, args, platform, env) {
+	try {
+		return await runProcess({
+			command: "codex",
+			args,
+			platform,
+			timeoutMs: CODEX_PLUGIN_TIMEOUT_MS,
+			maxOutputChars: MAX_CODEX_OUTPUT_CHARS,
+			env
+		});
+	} catch (error) {
+		if (!isUnavailableProcessError(error)) throw error;
+		return {
+			exitCode: null,
+			stdout: "",
+			stderr: "",
+			timedOut: false,
+			matched: false,
+			outputTruncated: false,
+			error: "Codex executable unavailable."
+		};
+	}
+}
+function externalFailure(result) {
+	if (result.timedOut) return skipped("timeout");
+	if (result.error !== void 0) return skipped("codex-unavailable");
+	if (result.exitCode === 0) return void 0;
+	const diagnostic = parseUnknownJson(result.stderr) ?? parseUnknownJson(result.stdout);
+	if (diagnostic === void 0) return skipped("invalid-response");
+	return skipped(classifyStructuredFailure(diagnostic));
+}
+function classifyStructuredFailure(value) {
+	const code = structuredErrorCode(value);
+	if (code === void 0) return "invalid-response";
+	if ([
+		"401",
+		"UNAUTHENTICATED",
+		"AUTHENTICATION_REQUIRED"
+	].includes(code)) return "unauthenticated";
+	if ([
+		"502",
+		"503",
+		"504",
+		"MARKETPLACE_UNAVAILABLE",
+		"MARKETPLACE_LOAD_FAILED",
+		"CATALOG_UNAVAILABLE"
+	].includes(code)) return "marketplace-unavailable";
+	if ([
+		"404",
+		"PLUGIN_NOT_FOUND",
+		"PLUGIN_UNAVAILABLE"
+	].includes(code)) return "plugin-unavailable";
+	if ([
+		"403",
+		"INSTALLATION_REJECTED",
+		"PERMISSION_DENIED",
+		"POLICY_REJECTED",
+		"ACCOUNT_RESTRICTED"
+	].includes(code)) return "installation-rejected";
+	return "invalid-response";
+}
+function structuredErrorCode(value) {
+	if (!isRecord(value)) return void 0;
+	const nested = value.error;
+	if (nested !== void 0) {
+		const nestedCode = structuredErrorCode(nested);
+		if (nestedCode !== void 0) return nestedCode;
+	}
+	for (const key of [
+		"code",
+		"status",
+		"statusCode"
+	]) {
+		const candidate = value[key];
+		if (typeof candidate === "string" || typeof candidate === "number") return String(candidate).trim().toUpperCase();
+	}
+}
+function parseJson(input, schema) {
+	const value = parseUnknownJson(input);
+	if (value === void 0) return void 0;
+	const parsed = schema.safeParse(value);
+	return parsed.success ? parsed.data : void 0;
+}
+function parseUnknownJson(input) {
+	try {
+		return JSON.parse(input);
+	} catch {
+		return;
+	}
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null;
+}
+function isUnavailableProcessError(value) {
+	if (!isRecord(value)) return false;
+	return [
+		"EACCES",
+		"ENOENT",
+		"EPERM"
+	].includes(String(value.code).toUpperCase());
+}
+function skipped(reason) {
+	return {
+		status: "skipped",
+		reason
+	};
+}
+//#endregion
 //#region packages/cli/src/files.ts
 /** Provides exists. */
 async function exists(path) {
@@ -5471,7 +5689,8 @@ async function readText(path) {
 //#region packages/cli/src/install.ts
 var defaultRuntime = {
 	platform: process.platform,
-	gitBash: resolveGitBashForCurrentProcess
+	gitBash: resolveGitBashForCurrentProcess,
+	runProcess: runManagedProcess
 };
 function paths(home = process.env.CODEX_HOME ?? join(homedir(), ".codex")) {
 	const marketplaceCache = join(home, "plugins", "cache", "holycodex");
@@ -5536,6 +5755,7 @@ async function install(options, runtime = defaultRuntime) {
 		await rm(path, { recursive: true });
 		removedLegacy.push(path);
 	}
+	const codexSecurity = await installCodexSecurity(runtime.runProcess, runtime.platform, process.env);
 	return {
 		action: "install",
 		changed: [
@@ -5546,6 +5766,7 @@ async function install(options, runtime = defaultRuntime) {
 		],
 		backups,
 		plan,
+		codexSecurity,
 		...options.maxSubagents === void 0 ? {} : { maxSubagents: options.maxSubagents }
 	};
 }
@@ -5728,7 +5949,14 @@ function renderRunResult(result, color) {
 	const action = result.action === "install" ? "Updated" : "Removed";
 	const empty = result.action === "install" ? "changes" : "removal";
 	const backup = result.backups.length === 0 ? "" : `\n  Existing HolyCodex files were backed up before ${result.action === "install" ? "replacement" : "cleanup"}.`;
-	return `${title}\n  ${result.changed.length === 0 ? `No HolyCodex-managed files needed ${empty}.` : `${action} HolyCodex configuration, plugin files, and agent profiles.`}${backup}\n`;
+	return `${title}\n  ${result.changed.length === 0 ? `No HolyCodex-managed files needed ${empty}.` : `${action} HolyCodex configuration, plugin files, and agent profiles.`}${backup}${renderCodexSecurity(result)}\n`;
+}
+function renderCodexSecurity(result) {
+	if (result.codexSecurity === void 0) return "";
+	if (result.codexSecurity.status === "installed") return "\n  Installed official Codex Security plugin.";
+	if (result.codexSecurity.status === "enabled") return "\n  Enabled existing official Codex Security plugin.";
+	if (result.codexSecurity.status === "already-installed") return "\n  Official Codex Security plugin is already installed and enabled.";
+	return `\n  Skipped official Codex Security plugin: ${result.codexSecurity.reason}.`;
 }
 /** Renders notice. */
 function renderNotice(kind, message, color) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "holycodex",
-  "version": "0.10.2",
+  "version": "0.10.3",
   "description": "Lean Codex-only agent toolkit installer and doctor",
   "keywords": [
     "agents",
@@ -39,7 +39,7 @@
     "prepack": "vp run --workspace-root build"
   },
   "dependencies": {
-    "@holycodex/plugin": "0.10.2",
+    "@holycodex/plugin": "0.10.3",
     "zod": "^4.4.3"
   },
   "engines": {