holycodex 0.2.1 → 0.3.0

package/README.md

@@ -9,7 +9,7 @@ HolyCodex installs one focused Codex toolkit:
 - 18 on-demand skills for programming, debugging, frontend, LSP, AST search, TDD, security research, planning, handoffs, goal definition, compression, and related workflows.
 - Three optional subagents: `explorer` for internal inspection, `librarian` for external research, and `worker` for bounded implementation.
 - Four MCP defaults: `git_bash`, `lsp`, `grep_app`, and `context7`.
-- Small hooks for readiness, OMO-style intent detection, Windows Git Bash guidance, comment checks, targeted LSP diagnostics, and scoped rules.
+- Small command hooks for readiness and scoped rules.
 - A Node-compatible installer and prebuilt runtime usable through npm or Bun.
 
 The primary agent always owns the task and decisions. Subagents exist only to reduce cost on narrow independent work—not to simulate an organization.
@@ -47,6 +47,8 @@ Installation is noninteractive. It:
 4. Installs the HolyCodex marketplace, plugin, agents, skills, hooks, and MCP definitions.
 5. Sets `max_concurrent_threads_per_session = 2` and defaults the root model to GPT-5.6 Sol low only when no root preference exists.
 
+Codex may still ask you to review and trust the installed command hooks. This security review is the only manual installation step.
+
 Options:
 
 ```sh
@@ -70,7 +72,7 @@ Cleanup backs up affected files, removes only HolyCodex-owned configuration and
 
 - `plugin/skills/` — shipped skill catalogue and on-demand references.
 - `plugin/agents/` — the three cost-focused subagent definitions.
-- `plugin/hooks/` — readiness and lightweight behavior hooks.
+- `plugin/hooks/` — supported command hooks for readiness and scoped rules.
 - `plugin/.mcp.json` — local and remote MCP defaults.
 - `plugin/runtime/` — prebuilt Node-compatible CLI, rules, Git Bash, and LSP runtime.
 - `src/` — installer, cleanup, bootstrap, and scoped-rules source.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "holycodex",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Lean Codex-only agent toolkit for ChatGPT Plus",
   "keywords": [
     "agents",

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "holycodex",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Lean Codex-only agents, skills, hooks, and MCP defaults.",
   "author": {
     "name": "David Basile Filho",
@@ -10,20 +10,14 @@
   "repository": "https://github.com/davidbasilefilho/holycodex",
   "license": "SUL-1.0",
   "skills": "./skills/",
-  "hooks": [
-    "./hooks/hooks.json"
-  ],
   "mcpServers": "./.mcp.json",
   "interface": {
     "displayName": "HolyCodex",
     "shortDescription": "Codex agents, routed skills, scoped rules, Git Bash, LSP, code search, and docs lookup.",
     "longDescription": "Use HolyCodex agents only for narrow delegated exploration, research, or isolated implementation. Skills declare their own triggers. Use git_bash for reliable Windows shell execution, lsp for semantic diagnostics and navigation, grep_app for public code examples, and context7 for current library documentation.",
+    "defaultPrompt": "Use HolyCodex to implement and verify this task.",
     "developerName": "David Basile Filho",
     "category": "Developer Tools",
-    "capabilities": [
-      "Hooks",
-      "MCP Tools",
-      "Code Intelligence"
-    ]
+    "capabilities": ["Hooks", "MCP Tools", "Code Intelligence"]
   }
 }

package/plugin/hooks/hooks.json

@@ -4,10 +4,6 @@
       {
         "matcher": "*",
         "hooks": [
-          {
-            "type": "prompt",
-            "prompt": "HolyCodex default: first state `I detect [intent type] - [reason]. [What I'm doing now].` This commits same-turn follow-through. Answer/review/diagnose/plan requests inspect and report; build/fix requests implement and verify. Status reports then continues active work. Work direct by default. Batch discovery. Always use the enabled git_bash MCP for shell commands. Use update_plan for multi-step work. Primary agent keeps control. Subagents only reduce cost; never simulate an organization. Max two narrow independent subagents; never recursive, duplicate, or full-history fork. Preserve user changes. Smallest root fix. Personally exercise artifact through matching surface. After three materially different failures, stop editing and ask one precise question. Load only path-relevant deduplicated rules; never reinject AGENTS.md. Sol/Terra allow low or medium reasoning; Luna allows low, medium, high. Final leads with result and proof."
-          },
           {
             "type": "command",
             "command": "node \"${PLUGIN_ROOT}/runtime/bootstrap.js\"",
@@ -36,33 +32,7 @@
         ]
       }
     ],
-    "PreToolUse": [
-      {
-        "matcher": "exec_command",
-        "hooks": [
-          { "type": "prompt", "prompt": "Use the enabled git_bash MCP for every shell command." }
-        ]
-      }
-    ],
     "PostToolUse": [
-      {
-        "matcher": "apply_patch|Write|Edit",
-        "hooks": [
-          {
-            "type": "prompt",
-            "prompt": "Check new comments. Remove stale, redundant, or narrative comments; preserve required directives and rationale."
-          }
-        ]
-      },
-      {
-        "matcher": "apply_patch|Write|Edit",
-        "hooks": [
-          {
-            "type": "prompt",
-            "prompt": "Run targeted LSP diagnostics for edited supported files only."
-          }
-        ]
-      },
       {
         "matcher": "^apply_patch$",
         "hooks": [
@@ -79,7 +49,6 @@
       {
         "matcher": "*",
         "hooks": [
-          { "type": "prompt", "prompt": "Reset scoped rule and LSP diagnostic caches." },
           {
             "type": "command",
             "command": "node \"${PLUGIN_ROOT}/runtime/rules.js\"",

package/plugin/runtime/cli.js

@@ -120,7 +120,7 @@ function paths(home = process.env.CODEX_HOME ?? join(homedir(), ".codex")) {
 		home,
 		config: join(home, "config.toml"),
 		cacheRoot,
-		cache: join(cacheRoot, "0.2.1"),
+		cache: join(cacheRoot, "0.3.0"),
 		agents: join(home, "holycodex", "agents"),
 		legacy: [
 			join(home, "plugins", "cache", "sisyphuslabs", "omo"),
@@ -208,7 +208,7 @@ async function cleanup(_options) {
 }
 //#endregion
 //#region src/cli.ts
-var VERSION = "0.2.1";
+var VERSION = "0.3.0";
 var HELP = `HolyCodex ${VERSION}\n\nUsage: holycodex <install|cleanup> [options]\n\nOptions:\n  --help              Show help\n  --version           Show version\n  --no-tui            Accepted; commands are noninteractive\n  --codex-autonomous  Set autonomous Codex permissions\n  --json              Print machine-readable result\n`;
 async function main() {
 	const args = process$1.argv.slice(2);

package/plugin/runtime/git-bash.js

@@ -112,9 +112,10 @@ async function runGitBashCommand(input) {
 				stderr
 			};
 		}
+		const env = input.env === void 0 ? void 0 : Object.fromEntries(Object.entries(input.env).filter(([key]) => key.toLowerCase() !== "original_path"));
 		const child = spawn(input.bashPath, ["-lc", input.command], {
 			cwd: input.cwd,
-			env: input.env,
+			env,
 			windowsHide: true,
 			stdio: [
 				"ignore",
@@ -165,7 +166,7 @@ async function handleGitBashMcpRequest(input, options = {}) {
 		capabilities: { tools: { listChanged: false } },
 		serverInfo: {
 			name: "git_bash",
-			version: "0.2.1"
+			version: "0.3.0"
 		},
 		protocolVersion: protocolVersionFromInput(input) ?? "2024-11-05"
 	});
@@ -190,7 +191,7 @@ async function runMcpStdioServer(input, output, options = {}) {
 	});
 }
 async function callTool(id, name, args, options) {
-	if (name === "which_bash") return toolResponse(id, whichBashPayload(resolve$1(options)));
+	if (name === "which_bash") return toolResponse(id, JSON.stringify(resolve$1(options), null, 2));
 	if (name === "diagnose") return toolResponse(id, diagnosePayload(resolve$1(options), platformFromOptions(options)));
 	if (name === "run") return await runToolResponse(id, args, options);
 	return toolResponse(id, `Unknown git_bash tool: ${name}`, true);
@@ -204,15 +205,16 @@ async function runToolResponse(id, args, options) {
 	const timeoutMs = parseTimeoutMs(args.timeout ?? args.timeout_ms, options);
 	if (timeoutMs === null) return toolResponse(id, `run.timeout must be an integer between 1 and ${MAX_TIMEOUT_MS}.`, true);
 	const resolution = resolve$1(options);
-	if (!resolution.found || resolution.path === null) return toolResponse(id, whichBashPayload(resolution), true);
+	if (!resolution.found || resolution.path === null) return toolResponse(id, JSON.stringify(resolution, null, 2), true);
 	try {
-		return toolResponse(id, runPayload(await (options.runGitBash ?? runGitBashCommand)({
+		const result = await (options.runGitBash ?? runGitBashCommand)({
 			bashPath: resolution.path,
 			command,
 			cwd,
 			timeoutMs,
 			env: options.env ?? process.env
-		})));
+		});
+		return toolResponse(id, JSON.stringify(result, null, 2));
 	} catch (error) {
 		return toolResponse(id, error instanceof Error ? error.message : String(error), true);
 	}
@@ -286,9 +288,6 @@ function resolve$1(options) {
 function platformFromOptions(options) {
 	return options.platform ?? process.platform;
 }
-function whichBashPayload(resolution) {
-	return JSON.stringify(resolution, null, 2);
-}
 function diagnosePayload(resolution, platform) {
 	const enabled = platform === "win32" && resolution.found && resolution.path !== null;
 	return JSON.stringify({
@@ -298,9 +297,6 @@ function diagnosePayload(resolution, platform) {
 		resolution
 	}, null, 2);
 }
-function runPayload(result) {
-	return JSON.stringify(result, null, 2);
-}
 function toolResponse(id, text, isError = false) {
 	return successResponse(id, {
 		content: [{

package/plugin/runtime/lsp.js

@@ -2476,14 +2476,11 @@ async function executeLspInstallDecision(params) {
 		errorKind: "unknown_server"
 	}, true);
 	recordInstallDecision(serverId, decision);
-	return text(`Recorded install decision for '${serverId}': ${decision}. ${decisionFollowUp(decision)}`, {
+	return text(`Recorded install decision for '${serverId}': ${decision}. ${decision === "declined" ? "Future LSP lookups for this server stay quiet; proceed without LSP." : "Future LSP lookups keep install instructions without asking the user."}`, {
 		serverId,
 		decision
 	});
 }
-function decisionFollowUp(decision) {
-	return decision === "declined" ? "Future LSP lookups for this server stay quiet; proceed without LSP." : "Future LSP lookups keep install instructions without asking the user.";
-}
 //#endregion
 //#region packages/lsp-core/src/tools/navigation.ts
 async function executeLspGotoDefinition(params, signal) {
@@ -3065,20 +3062,17 @@ var LSP_MCP_TOOLS = [
 //#endregion
 //#region packages/lsp-core/src/tools/runtime.ts
 async function executeLspTool(name, params, signal) {
-	const tool = LSP_MCP_TOOLS.find((candidate) => matchesToolName(candidate, name));
+	const tool = LSP_MCP_TOOLS.find((candidate) => candidate.name === name || (candidate.aliases?.includes(name) ?? false));
 	if (!tool) throw new Error(`Unknown LSP tool: ${name}`);
 	return tool.execute(params, signal);
 }
-function matchesToolName(tool, name) {
-	return tool.name === name || (tool.aliases?.includes(name) ?? false);
-}
 function coerceToolArguments(value) {
 	return isRecord(value) ? value : {};
 }
 //#endregion
 //#region packages/lsp-core/src/mcp.ts
 var SERVER_NAME = "lsp";
-var SERVER_VERSION = "0.2.1";
+var SERVER_VERSION = "0.3.0";
 async function handleLspMcpRequest(input) {
 	if (!isPlainRecord(input)) return errorResponse(null, -32600, "Invalid Request");
 	const id = jsonRpcId(input["id"]);
@@ -3445,7 +3439,7 @@ function daemonUnreachableResult(paths, error) {
 		content: [{
 			type: "text",
 			text: [
-				`LSP daemon unreachable: ${errorText(error)}.`,
+				`LSP daemon unreachable: ${error instanceof Error ? error.message : String(error)}.`,
 				"The MCP server is a thin proxy and never runs language servers in-process.",
 				`Socket: ${paths.socket}`,
 				`Logs: ${paths.log}`,
@@ -3501,9 +3495,6 @@ function toToolResult(message) {
 		details: result["details"]
 	};
 }
-function errorText(error) {
-	return error instanceof Error ? error.message : String(error);
-}
 //#endregion
 //#region packages/lsp-daemon/src/proxy.ts
 async function runMcpStdioProxy(options = {}) {