mewkit 1.6.8 → 1.7.0

package/dist/migrate/frontmatter-parser.js

@@ -0,0 +1,99 @@
+// Vendored from claudekit-cli (MIT). Source: src/commands/portable/frontmatter-parser.ts
+// Adapted: replaced gray-matter dep with js-yaml + regex fallback (mewkit already ships js-yaml).
+import { readFile } from "node:fs/promises";
+import yaml from "js-yaml";
+const FRONTMATTER_LIMITS = {
+    name: 200,
+    description: 500,
+    model: 100,
+    tools: 1000,
+    memory: 50,
+    argumentHint: 500,
+};
+const KNOWN_KEYS = {
+    name: "name",
+    description: "description",
+    model: "model",
+    tools: "tools",
+    memory: "memory",
+    "argument-hint": "argumentHint",
+};
+const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/;
+function truncateField(value, field, warnings) {
+    const limit = FRONTMATTER_LIMITS[field];
+    if (limit && value.length > limit) {
+        warnings.push(`Frontmatter field "${field}" truncated to ${limit} characters`);
+        return value.slice(0, limit);
+    }
+    return value;
+}
+function stripBom(content) {
+    return content.replace(/^/, "");
+}
+function parseFrontmatterFallback(content) {
+    const fmMatch = content.match(FRONTMATTER_RE);
+    if (!fmMatch)
+        return null;
+    const fmBlock = fmMatch[1];
+    const body = content.slice(fmMatch[0].length);
+    const frontmatter = {};
+    const warnings = [];
+    for (const line of fmBlock.split(/\r?\n/)) {
+        const keyMatch = line.match(/^([a-zA-Z][\w-]*)\s*:\s*(.*)/);
+        if (!keyMatch)
+            continue;
+        const [, rawKey, rawValue] = keyMatch;
+        const value = rawValue.replace(/^(['"])(.*)\1$/, "$2").trim();
+        if (!value)
+            continue;
+        const mapped = KNOWN_KEYS[rawKey];
+        if (mapped) {
+            frontmatter[mapped] = truncateField(value, String(mapped), warnings);
+        }
+        else {
+            frontmatter[rawKey] = value;
+        }
+    }
+    return { frontmatter, body: body.trim(), warnings };
+}
+export function parseFrontmatter(content) {
+    const normalized = stripBom(content);
+    const match = normalized.match(FRONTMATTER_RE);
+    if (!match)
+        return { frontmatter: {}, body: normalized.trim(), warnings: [] };
+    const fmBlock = match[1];
+    const body = normalized.slice(match[0].length);
+    try {
+        const data = (yaml.load(fmBlock) ?? {});
+        const frontmatter = {};
+        const warnings = [];
+        const setKnown = (target, raw) => {
+            if (raw === undefined || raw === null)
+                return;
+            frontmatter[target] = truncateField(String(raw), String(target), warnings);
+        };
+        setKnown("name", data.name);
+        setKnown("description", data.description);
+        setKnown("model", data.model);
+        setKnown("tools", data.tools);
+        setKnown("memory", data.memory);
+        setKnown("argumentHint", data["argument-hint"]);
+        for (const [key, value] of Object.entries(data)) {
+            if (!(key in frontmatter) && key !== "argument-hint") {
+                frontmatter[key] = value;
+            }
+        }
+        return { frontmatter, body: body.trim(), warnings };
+    }
+    catch {
+        const fallback = parseFrontmatterFallback(normalized);
+        if (fallback && Object.keys(fallback.frontmatter).length > 0)
+            return fallback;
+        return { frontmatter: {}, body: normalized.trim(), warnings: [] };
+    }
+}
+export async function parseFrontmatterFile(filePath) {
+    const content = await readFile(filePath, "utf-8");
+    return parseFrontmatter(content);
+}
+//# sourceMappingURL=frontmatter-parser.js.map

package/dist/migrate/frontmatter-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter-parser.js","sourceRoot":"","sources":["../../src/migrate/frontmatter-parser.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,kGAAkG;AAClG,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,SAAS,CAAC;AAG3B,MAAM,kBAAkB,GAA2B;IAClD,IAAI,EAAE,GAAG;IACT,WAAW,EAAE,GAAG;IAChB,KAAK,EAAE,GAAG;IACV,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,EAAE;IACV,YAAY,EAAE,GAAG;CACjB,CAAC;AAEF,MAAM,UAAU,GAA4C;IAC3D,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;IAC1B,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,eAAe,EAAE,cAAc;CAC/B,CAAC;AAEF,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAE3D,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa,EAAE,QAAkB;IACtE,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,KAAK,kBAAkB,KAAK,aAAa,CAAC,CAAC;QAC/E,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAChC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACP,WAAW,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACF,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAE9E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE/C,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAC;QACnE,MAAM,WAAW,GAAsB,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,QAAQ,GAAG,CAAC,MAA+B,EAAE,GAAY,EAAQ,EAAE;YACxE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO;YAC9C,WAAW,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC5E,CAAC,CAAC;QAEF,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;QAEhD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,CAAC,GAAG,IAAI,WAAW,CAAC,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;gBACtD,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC;QACF,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,QAAQ,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC9E,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACnE,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IAC1D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC"}

package/dist/migrate/hooks/codex-features-flag.d.ts

@@ -0,0 +1,8 @@
+export type FeatureFlagWriteStatus = "written" | "updated" | "already-set" | "failed";
+export interface FeatureFlagWriteResult {
+    status: FeatureFlagWriteStatus;
+    configPath: string;
+    error?: string;
+}
+export declare function ensureCodexHooksFeatureFlag(configTomlPath: string, isGlobal?: boolean): Promise<FeatureFlagWriteResult>;
+//# sourceMappingURL=codex-features-flag.d.ts.map

package/dist/migrate/hooks/codex-features-flag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-features-flag.d.ts","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-features-flag.ts"],"names":[],"mappings":"AAoBA,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEtF,MAAM,WAAW,sBAAsB;IACtC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,2BAA2B,CAChD,cAAc,EAAE,MAAM,EACtB,QAAQ,UAAQ,GACd,OAAO,CAAC,sBAAsB,CAAC,CAWjC"}

package/dist/migrate/hooks/codex-features-flag.js

@@ -0,0 +1,146 @@
+// Vendored from claudekit-cli (MIT). Source: src/commands/portable/codex-features-flag.ts
+// Idempotently ensures `[features] codex_hooks = true` in ~/.codex/config.toml.
+// Sentinel renamed: ck-managed → mewkit-managed.
+import { existsSync } from "node:fs";
+import { readFile, rename, unlink, writeFile } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { getCodexGlobalBoundary, isCanonicalPathWithinBoundary, withCodexTargetLock, } from "./codex-path-safety.js";
+const SENTINEL_START = "# --- mewkit-managed-features-start ---";
+const SENTINEL_END = "# --- mewkit-managed-features-end ---";
+const MANAGED_BLOCK = `${SENTINEL_START}
+[features]
+codex_hooks = true
+${SENTINEL_END}`;
+export async function ensureCodexHooksFeatureFlag(configTomlPath, isGlobal = false) {
+    const boundary = isGlobal ? getCodexGlobalBoundary() : dirname(resolve(configTomlPath));
+    if (!(await isCanonicalPathWithinBoundary(dirname(resolve(configTomlPath)), boundary))) {
+        return {
+            status: "failed",
+            configPath: configTomlPath,
+            error: `Unsafe path: config.toml target escapes Codex boundary (${boundary})`,
+        };
+    }
+    return withCodexTargetLock(configTomlPath, () => ensureFlagLocked(configTomlPath));
+}
+async function ensureFlagLocked(configTomlPath) {
+    let existing = "";
+    if (existsSync(configTomlPath)) {
+        try {
+            existing = await readFile(configTomlPath, "utf8");
+        }
+        catch (err) {
+            return {
+                status: "failed", configPath: configTomlPath,
+                error: `Failed to read ${configTomlPath}: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+    }
+    const { content: stripped, removed: hadManagedBlock } = stripAllManagedBlocks(existing);
+    let content = stripped;
+    let mutated = hadManagedBlock;
+    const featuresHeaderIdx = findFeaturesSectionStart(content);
+    if (featuresHeaderIdx !== -1) {
+        const { updated, changed } = ensureFlagInFeaturesSection(content, featuresHeaderIdx);
+        content = updated;
+        mutated = mutated || changed;
+        if (!mutated)
+            return { status: "already-set", configPath: configTomlPath };
+        try {
+            await atomicWrite(configTomlPath, content);
+        }
+        catch (err) {
+            return {
+                status: "failed", configPath: configTomlPath,
+                error: `Failed to write ${configTomlPath}: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        return { status: "updated", configPath: configTomlPath };
+    }
+    const separator = content.length === 0 ? "" : content.endsWith("\n") ? "\n" : "\n\n";
+    const withBlock = `${content}${separator}${MANAGED_BLOCK}\n`;
+    try {
+        await atomicWrite(configTomlPath, withBlock);
+    }
+    catch (err) {
+        return {
+            status: "failed", configPath: configTomlPath,
+            error: `Failed to write ${configTomlPath}: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    return { status: hadManagedBlock ? "updated" : "written", configPath: configTomlPath };
+}
+function findFeaturesSectionStart(content) {
+    const match = /^[ \t]*\[features\][ \t]*(?:#[^\r\n]*)?$/m.exec(content);
+    return match ? match.index : -1;
+}
+function ensureFlagInFeaturesSection(content, headerStartIdx) {
+    const headerLineEnd = content.indexOf("\n", headerStartIdx);
+    const bodyStart = headerLineEnd === -1 ? content.length : headerLineEnd + 1;
+    const rest = content.slice(bodyStart);
+    const nextHeaderMatch = /\n\[[^\]]+\]/.exec(rest);
+    const bodyEnd = nextHeaderMatch ? bodyStart + nextHeaderMatch.index + 1 : content.length;
+    const body = content.slice(bodyStart, bodyEnd);
+    const flagRegex = /^([ \t]*codex_hooks[ \t]*=[ \t]*)(true|false)([ \t]*#[^\r\n]*)?[ \t]*$/m;
+    const flagMatch = flagRegex.exec(body);
+    if (flagMatch) {
+        if (flagMatch[2] === "true")
+            return { updated: content, changed: false };
+        const newBody = body.replace(flagRegex, (_m, prefix, _v, trailing) => `${prefix}true${trailing ?? ""}`);
+        return {
+            updated: content.slice(0, bodyStart) + newBody + content.slice(bodyEnd),
+            changed: true,
+        };
+    }
+    if (headerLineEnd === -1) {
+        return { updated: `${content}\ncodex_hooks = true\n`, changed: true };
+    }
+    let insertAt = bodyEnd;
+    while (insertAt > bodyStart && content[insertAt - 1] === "\n" && content[insertAt - 2] === "\n") {
+        insertAt -= 1;
+    }
+    const needsLeadingNewline = insertAt > bodyStart && content[insertAt - 1] !== "\n";
+    const insertion = `${needsLeadingNewline ? "\n" : ""}codex_hooks = true\n`;
+    return {
+        updated: content.slice(0, insertAt) + insertion + content.slice(insertAt),
+        changed: true,
+    };
+}
+function stripAllManagedBlocks(content) {
+    let result = content;
+    let removed = false;
+    while (true) {
+        const startIdx = result.indexOf(SENTINEL_START);
+        if (startIdx === -1)
+            break;
+        const endIdx = result.indexOf(SENTINEL_END, startIdx);
+        if (endIdx === -1)
+            break;
+        const endOfBlock = endIdx + SENTINEL_END.length;
+        const afterBlockStart = result[endOfBlock] === "\n" ? endOfBlock + 1 : endOfBlock;
+        let beforeBlockEnd = startIdx;
+        if (beforeBlockEnd >= 1 && result[beforeBlockEnd - 1] === "\n") {
+            beforeBlockEnd -= 1;
+            if (beforeBlockEnd >= 1 && result[beforeBlockEnd - 1] === "\n")
+                beforeBlockEnd -= 1;
+            beforeBlockEnd += 1;
+        }
+        result = result.slice(0, beforeBlockEnd) + result.slice(afterBlockStart);
+        removed = true;
+    }
+    return { content: result, removed };
+}
+async function atomicWrite(filePath, content) {
+    const tempPath = `${filePath}.mewkit-tmp`;
+    try {
+        await writeFile(tempPath, content, "utf8");
+        await rename(tempPath, filePath);
+    }
+    catch (err) {
+        try {
+            await unlink(tempPath);
+        }
+        catch { /* ignore */ }
+        throw err;
+    }
+}
+//# sourceMappingURL=codex-features-flag.js.map

package/dist/migrate/hooks/codex-features-flag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-features-flag.js","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-features-flag.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,gFAAgF;AAChF,iDAAiD;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACN,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,GACnB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,cAAc,GAAG,yCAAyC,CAAC;AACjE,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAE7D,MAAM,aAAa,GAAG,GAAG,cAAc;;;EAGrC,YAAY,EAAE,CAAC;AAUjB,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,cAAsB,EACtB,QAAQ,GAAG,KAAK;IAEhB,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,MAAM,6BAA6B,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO;YACN,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,cAAc;YAC1B,KAAK,EAAE,2DAA2D,QAAQ,GAAG;SAC7E,CAAC;IACH,CAAC;IAED,OAAO,mBAAmB,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,cAAsB;IACrD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO;gBACN,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc;gBAC5C,KAAK,EAAE,kBAAkB,cAAc,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAC9F,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACxF,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,IAAI,OAAO,GAAG,eAAe,CAAC;IAE9B,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAE5D,IAAI,iBAAiB,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,2BAA2B,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACrF,OAAO,GAAG,OAAO,CAAC;QAClB,OAAO,GAAG,OAAO,IAAI,OAAO,CAAC;QAE7B,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;QAE3E,IAAI,CAAC;YACJ,MAAM,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO;gBACN,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc;gBAC5C,KAAK,EAAE,mBAAmB,cAAc,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAC/F,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACrF,MAAM,SAAS,GAAG,GAAG,OAAO,GAAG,SAAS,GAAG,aAAa,IAAI,CAAC;IAE7D,IAAI,CAAC;QACJ,MAAM,WAAW,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO;YACN,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc;YAC5C,KAAK,EAAE,mBAAmB,cAAc,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC/F,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAChD,MAAM,KAAK,GAAG,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,2BAA2B,CACnC,OAAe,EACf,cAAsB;IAEtB,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC;IAE5E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,eAAe,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,SAAS,GAAG,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAEzF,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,yEAAyE,CAAC;IAC5F,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEvC,IAAI,SAAS,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAC3B,SAAS,EACT,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,QAAQ,IAAI,EAAE,EAAE,CAC9D,CAAC;QACF,OAAO;YACN,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YACvE,OAAO,EAAE,IAAI;SACb,CAAC;IACH,CAAC;IAED,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC;IAED,IAAI,QAAQ,GAAG,OAAO,CAAC;IACvB,OAAO,QAAQ,GAAG,SAAS,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACjG,QAAQ,IAAI,CAAC,CAAC;IACf,CAAC;IACD,MAAM,mBAAmB,GAAG,QAAQ,GAAG,SAAS,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;IACnF,MAAM,SAAS,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC;IAE3E,OAAO;QACN,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QACzE,OAAO,EAAE,IAAI;KACb,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC7C,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,MAAM;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,CAAC,CAAC;YAAE,MAAM;QAEzB,MAAM,UAAU,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;QAChD,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAElF,IAAI,cAAc,GAAG,QAAQ,CAAC;QAC9B,IAAI,cAAc,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAChE,cAAc,IAAI,CAAC,CAAC;YACpB,IAAI,cAAc,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,cAAc,IAAI,CAAC,CAAC;YACpF,cAAc,IAAI,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACzE,OAAO,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAe;IAC3D,MAAM,QAAQ,GAAG,GAAG,QAAQ,aAAa,CAAC;IAC1C,IAAI,CAAC;QACJ,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,GAAG,CAAC;IACX,CAAC;AACF,CAAC"}

package/dist/migrate/hooks/codex-hook-wrapper.d.ts

@@ -0,0 +1,10 @@
+import type { CodexCapabilities } from "../codex-capabilities.js";
+export interface WrapperGenerateResult {
+    wrapperPath: string;
+    originalPath: string;
+    success: boolean;
+    error?: string;
+}
+export declare function generateCodexHookWrappers(originalPaths: string[], wrapperDir: string, capabilities: CodexCapabilities, timeoutsByPath?: Record<string, number>): WrapperGenerateResult[];
+export declare function buildWrapperScript(originalPath: string, capabilities: CodexCapabilities, hookTimeoutMs?: number): string;
+//# sourceMappingURL=codex-hook-wrapper.d.ts.map

package/dist/migrate/hooks/codex-hook-wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hook-wrapper.d.ts","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-hook-wrapper.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAGlE,MAAM,WAAW,qBAAqB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AASD,wBAAgB,yBAAyB,CACxC,aAAa,EAAE,MAAM,EAAE,EACvB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,iBAAiB,EAC/B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACrC,qBAAqB,EAAE,CAgCzB;AAOD,wBAAgB,kBAAkB,CACjC,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,iBAAiB,EAC/B,aAAa,CAAC,EAAE,MAAM,GACpB,MAAM,CA0HR"}

package/dist/migrate/hooks/codex-hook-wrapper.js

@@ -0,0 +1,166 @@
+// Vendored from claudekit-cli (MIT). Source: src/commands/portable/codex-hook-wrapper.ts
+// Generates per-hook .cjs wrapper that scrubs Claude-only fields from hook stdout
+// before re-emitting to Codex stdout. Wrapper is self-contained — no mewkit imports at runtime.
+import { createHash } from "node:crypto";
+import { mkdirSync, writeFileSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { isPathWithinBoundary } from "./codex-path-safety.js";
+function wrapperFilename(originalPath) {
+    const abs = resolve(originalPath);
+    const hash = createHash("sha256").update(abs).digest("hex").slice(0, 8);
+    const base = abs.split(/[\\/]/).pop() ?? "hook.cjs";
+    return `${hash}-${base}`;
+}
+export function generateCodexHookWrappers(originalPaths, wrapperDir, capabilities, timeoutsByPath) {
+    const results = [];
+    const resolvedWrapperDir = resolve(wrapperDir);
+    for (const originalPath of originalPaths) {
+        const filename = wrapperFilename(originalPath);
+        const wrapperPath = join(resolvedWrapperDir, filename);
+        if (!isPathWithinBoundary(wrapperPath, resolvedWrapperDir)) {
+            results.push({
+                wrapperPath, originalPath, success: false,
+                error: `Unsafe wrapper path: ${wrapperPath} escapes ${resolvedWrapperDir}`,
+            });
+            continue;
+        }
+        try {
+            mkdirSync(dirname(wrapperPath), { recursive: true });
+            const resolvedPath = resolve(originalPath);
+            const hookTimeoutMs = timeoutsByPath?.[resolvedPath] ?? timeoutsByPath?.[originalPath];
+            const content = buildWrapperScript(originalPath, capabilities, hookTimeoutMs);
+            writeFileSync(wrapperPath, content, { mode: 0o755 });
+            results.push({ wrapperPath, originalPath, success: true });
+        }
+        catch (err) {
+            results.push({
+                wrapperPath, originalPath, success: false,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    return results;
+}
+export function buildWrapperScript(originalPath, capabilities, hookTimeoutMs) {
+    const scrubRules = {};
+    for (const [event, caps] of Object.entries(capabilities.events)) {
+        const deleteFields = [];
+        if (!caps.supportsAdditionalContext)
+            deleteFields.push("additionalContext");
+        const allowedPermissionValues = caps.permissionDecisionValues ?? null;
+        if (deleteFields.length > 0 || allowedPermissionValues !== null) {
+            scrubRules[event] = { deleteFields, allowedPermissionValues };
+        }
+    }
+    const escapedOriginalPath = JSON.stringify(originalPath);
+    const scrubRulesJson = JSON.stringify(scrubRules);
+    const effectiveTimeout = hookTimeoutMs ?? 30000;
+    return `#!/usr/bin/env node
+// AUTO-GENERATED by mewkit migrate — DO NOT EDIT
+// Codex hook compatibility wrapper for:
+//   ${originalPath}
+"use strict";
+
+const { spawnSync } = require("node:child_process");
+
+const ORIGINAL_HOOK = ${escapedOriginalPath};
+const SCRUB_RULES = ${scrubRulesJson};
+const HOOK_TIMEOUT_MS = ${effectiveTimeout};
+
+function getEventFromStdin(stdinData) {
+  try {
+    const parsed = JSON.parse(stdinData);
+    return parsed.hook_event_name || parsed.event || null;
+  } catch {
+    return null;
+  }
+}
+
+function sanitizeOutput(obj, rules) {
+  if (!obj || typeof obj !== "object" || Array.isArray(obj)) return obj;
+  const result = Object.assign({}, obj);
+  for (const field of rules.deleteFields) delete result[field];
+  if (rules.allowedPermissionValues !== null) {
+    const allowed = new Set(rules.allowedPermissionValues);
+    if (result.permissionDecision !== undefined && !allowed.has(result.permissionDecision)) {
+      delete result.permissionDecision;
+    }
+    if (result.decision !== undefined && !allowed.has(result.decision)) delete result.decision;
+  }
+  return result;
+}
+
+function eventSupportsDeny(rules) {
+  if (!rules || rules.allowedPermissionValues === null) return false;
+  return rules.allowedPermissionValues.indexOf("deny") !== -1;
+}
+
+function emitDeny(reason) {
+  process.stdout.write(JSON.stringify({
+    permissionDecision: "deny",
+    reason: reason && reason.length > 0 ? reason : "Hook blocked this operation",
+  }));
+  process.exit(0);
+}
+
+function main() {
+  const stdinChunks = [];
+  process.stdin.on("data", (chunk) => stdinChunks.push(chunk));
+  process.stdin.on("end", () => {
+    const stdinData = Buffer.concat(stdinChunks).toString("utf8");
+    const event = getEventFromStdin(stdinData);
+    const rules = event && SCRUB_RULES[event];
+
+    const result = spawnSync(process.execPath, [ORIGINAL_HOOK], {
+      input: stdinData,
+      env: process.env,
+      encoding: "utf8",
+      timeout: HOOK_TIMEOUT_MS,
+    });
+
+    if (result.error) {
+      if (result.stderr) process.stderr.write(result.stderr);
+      process.exit(1);
+    }
+
+    const stderrText = (result.stderr || "").toString();
+    const rawOutput = (result.stdout || "").toString();
+    const exitCode = result.status ?? 1;
+    const isBlockSignal = exitCode === 2 && eventSupportsDeny(rules);
+
+    if (!rawOutput.trim()) {
+      if (isBlockSignal) return emitDeny(stderrText.trim());
+      if (stderrText) process.stderr.write(stderrText);
+      process.exit(exitCode);
+    }
+
+    let parsed;
+    try {
+      parsed = JSON.parse(rawOutput);
+    } catch {
+      if (isBlockSignal) {
+        const reason = rawOutput.trim() || stderrText.trim();
+        return emitDeny(reason);
+      }
+      if (stderrText) process.stderr.write(stderrText);
+      process.stdout.write(rawOutput);
+      process.exit(exitCode);
+    }
+
+    if (stderrText) process.stderr.write(stderrText);
+
+    const sanitized = rules ? sanitizeOutput(parsed, rules) : parsed;
+
+    if (isBlockSignal && (!sanitized || sanitized.permissionDecision !== "deny")) {
+      return emitDeny(stderrText.trim());
+    }
+
+    process.stdout.write(JSON.stringify(sanitized));
+    process.exit(isBlockSignal ? 0 : exitCode);
+  });
+}
+
+main();
+`;
+}
+//# sourceMappingURL=codex-hook-wrapper.js.map

package/dist/migrate/hooks/codex-hook-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hook-wrapper.js","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-hook-wrapper.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,kFAAkF;AAClF,gGAAgG;AAChG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAS9D,SAAS,eAAe,CAAC,YAAoB;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC;IACpD,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,aAAuB,EACvB,UAAkB,EAClB,YAA+B,EAC/B,cAAuC;IAEvC,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE/C,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QAEvD,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC;gBACZ,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK;gBACzC,KAAK,EAAE,wBAAwB,WAAW,YAAY,kBAAkB,EAAE;aAC1E,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QAED,IAAI,CAAC;YACJ,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;YAC3C,MAAM,aAAa,GAAG,cAAc,EAAE,CAAC,YAAY,CAAC,IAAI,cAAc,EAAE,CAAC,YAAY,CAAC,CAAC;YACvF,MAAM,OAAO,GAAG,kBAAkB,CAAC,YAAY,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;YAC9E,aAAa,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC;gBACZ,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK;gBACzC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAOD,MAAM,UAAU,kBAAkB,CACjC,YAAoB,EACpB,YAA+B,EAC/B,aAAsB;IAEtB,MAAM,UAAU,GAAoC,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,yBAAyB;YAAE,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5E,MAAM,uBAAuB,GAAG,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC;QACtE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,uBAAuB,KAAK,IAAI,EAAE,CAAC;YACjE,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,uBAAuB,EAAE,CAAC;QAC/D,CAAC;IACF,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,aAAa,IAAI,KAAK,CAAC;IAEhD,OAAO;;;OAGD,YAAY;;;;;wBAKK,mBAAmB;sBACrB,cAAc;0BACV,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgGzC,CAAC;AACF,CAAC"}

package/dist/migrate/hooks/codex-path-safety.d.ts

@@ -0,0 +1,5 @@
+export declare function isPathWithinBoundary(targetPath: string, boundaryPath: string): boolean;
+export declare function isCanonicalPathWithinBoundary(targetPath: string, boundaryPath: string): Promise<boolean>;
+export declare function withCodexTargetLock<T>(targetFilePath: string, operation: () => Promise<T>): Promise<T>;
+export declare function getCodexGlobalBoundary(): string;
+//# sourceMappingURL=codex-path-safety.d.ts.map

package/dist/migrate/hooks/codex-path-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-path-safety.d.ts","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-path-safety.ts"],"names":[],"mappings":"AASA,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAMtF;AAUD,wBAAsB,6BAA6B,CAClD,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAIlB;AAuDD,wBAAsB,mBAAmB,CAAC,CAAC,EAC1C,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACzB,OAAO,CAAC,CAAC,CAAC,CAaZ;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C"}

package/dist/migrate/hooks/codex-path-safety.js

@@ -0,0 +1,99 @@
+// Vendored from claudekit-cli (MIT). Source: src/commands/portable/codex-path-safety.ts
+// Adapted: PID-based lock instead of proper-lockfile (no new dep).
+import { existsSync } from "node:fs";
+import { mkdir, readFile, realpath, unlink, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join, resolve, sep } from "node:path";
+const STALE_LOCK_MS = 60 * 1000;
+export function isPathWithinBoundary(targetPath, boundaryPath) {
+    const resolvedTarget = resolve(targetPath);
+    const resolvedBoundary = resolve(boundaryPath);
+    return (resolvedTarget === resolvedBoundary || resolvedTarget.startsWith(`${resolvedBoundary}${sep}`));
+}
+async function resolveRealPathSafe(path) {
+    try {
+        return await realpath(path);
+    }
+    catch {
+        return resolve(path);
+    }
+}
+export async function isCanonicalPathWithinBoundary(targetPath, boundaryPath) {
+    const canonicalTarget = await resolveRealPathSafe(targetPath);
+    const canonicalBoundary = await resolveRealPathSafe(boundaryPath);
+    return isPathWithinBoundary(canonicalTarget, canonicalBoundary);
+}
+function getCodexLockPath(targetFilePath) {
+    return join(dirname(resolve(targetFilePath)), ".config.toml.mewkit-codex.lock");
+}
+function isProcessAlive(pid) {
+    if (!Number.isFinite(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function acquireCodexLock(lockPath) {
+    const startTime = Date.now();
+    while (true) {
+        try {
+            await writeFile(lockPath, `${process.pid}\n${Date.now()}\n`, { encoding: "utf-8", flag: "wx" });
+            return;
+        }
+        catch (err) {
+            const e = err;
+            if (e.code !== "EEXIST")
+                throw err;
+        }
+        try {
+            const content = (await readFile(lockPath, "utf-8")).trim();
+            const [pidStr, tsStr] = content.split("\n");
+            const pid = Number.parseInt(pidStr ?? "", 10);
+            const ts = Number.parseInt(tsStr ?? "", 10);
+            if (!isProcessAlive(pid) || (Number.isFinite(ts) && Date.now() - ts > STALE_LOCK_MS)) {
+                try {
+                    await unlink(lockPath);
+                }
+                catch { /* race */ }
+                continue;
+            }
+        }
+        catch {
+            // Lock disappeared between checks
+        }
+        if (Date.now() - startTime > 10_000) {
+            throw new Error(`Could not acquire Codex lock at ${lockPath} within 10s`);
+        }
+        await new Promise((r) => setTimeout(r, 100));
+    }
+}
+async function releaseCodexLock(lockPath) {
+    try {
+        await unlink(lockPath);
+    }
+    catch {
+        // Best-effort
+    }
+}
+export async function withCodexTargetLock(targetFilePath, operation) {
+    const resolvedTargetPath = resolve(targetFilePath);
+    const dir = dirname(resolvedTargetPath);
+    if (!existsSync(dir))
+        await mkdir(dir, { recursive: true });
+    const lockPath = getCodexLockPath(resolvedTargetPath);
+    await acquireCodexLock(lockPath);
+    try {
+        return await operation();
+    }
+    finally {
+        await releaseCodexLock(lockPath);
+    }
+}
+export function getCodexGlobalBoundary() {
+    return join(homedir(), ".codex");
+}
+//# sourceMappingURL=codex-path-safety.js.map

package/dist/migrate/hooks/codex-path-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-path-safety.js","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-path-safety.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,mEAAmE;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAExD,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhC,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,YAAoB;IAC5E,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,OAAO,CACN,cAAc,KAAK,gBAAgB,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,GAAG,EAAE,CAAC,CAC7F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACJ,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,UAAkB,EAClB,YAAoB;IAEpB,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClE,OAAO,oBAAoB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,cAAsB;IAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,IAAI,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAChG,OAAO;QACR,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,GAA4B,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QACpC,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC;gBACtF,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;gBACpD,SAAS;YACV,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,kCAAkC;QACnC,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,aAAa,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;AACF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,cAAc;IACf,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,cAAsB,EACtB,SAA2B;IAE3B,MAAM,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAExC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC;QACJ,OAAO,MAAM,SAAS,EAAE,CAAC;IAC1B,CAAC;YAAS,CAAC;QACV,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB;IACrC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/dist/migrate/hooks/codex-toml-installer.d.ts

@@ -0,0 +1,15 @@
+import type { PortableItem, ProviderType } from "../types.js";
+export interface CodexInstallResult {
+    provider: ProviderType;
+    success: boolean;
+    written: number;
+    error?: string;
+}
+/**
+ * Install Codex agents: write per-agent .toml + merge managed block in config.toml.
+ * Atomic per-file; transactional rollback if config.toml merge fails.
+ */
+export declare function installCodexAgents(agents: PortableItem[], options: {
+    global: boolean;
+}): Promise<CodexInstallResult>;
+//# sourceMappingURL=codex-toml-installer.d.ts.map

package/dist/migrate/hooks/codex-toml-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-toml-installer.d.ts","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-toml-installer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAU9D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAoCD;;;GAGG;AACH,wBAAsB,kBAAkB,CACvC,MAAM,EAAE,YAAY,EAAE,EACtB,OAAO,EAAE;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CAyE7B"}