mewkit 1.7.1 → 1.8.0

package/dist/migrate/hooks/codex-hook-wrapper.js

@@ -0,0 +1,166 @@
+// Vendored from claudekit-cli (MIT). Source: src/commands/portable/codex-hook-wrapper.ts
+// Generates per-hook .cjs wrapper that scrubs Claude-only fields from hook stdout
+// before re-emitting to Codex stdout. Wrapper is self-contained — no mewkit imports at runtime.
+import { createHash } from "node:crypto";
+import { mkdirSync, writeFileSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { isPathWithinBoundary } from "./codex-path-safety.js";
+function wrapperFilename(originalPath) {
+    const abs = resolve(originalPath);
+    const hash = createHash("sha256").update(abs).digest("hex").slice(0, 8);
+    const base = abs.split(/[\\/]/).pop() ?? "hook.cjs";
+    return `${hash}-${base}`;
+}
+export function generateCodexHookWrappers(originalPaths, wrapperDir, capabilities, timeoutsByPath) {
+    const results = [];
+    const resolvedWrapperDir = resolve(wrapperDir);
+    for (const originalPath of originalPaths) {
+        const filename = wrapperFilename(originalPath);
+        const wrapperPath = join(resolvedWrapperDir, filename);
+        if (!isPathWithinBoundary(wrapperPath, resolvedWrapperDir)) {
+            results.push({
+                wrapperPath, originalPath, success: false,
+                error: `Unsafe wrapper path: ${wrapperPath} escapes ${resolvedWrapperDir}`,
+            });
+            continue;
+        }
+        try {
+            mkdirSync(dirname(wrapperPath), { recursive: true });
+            const resolvedPath = resolve(originalPath);
+            const hookTimeoutMs = timeoutsByPath?.[resolvedPath] ?? timeoutsByPath?.[originalPath];
+            const content = buildWrapperScript(originalPath, capabilities, hookTimeoutMs);
+            writeFileSync(wrapperPath, content, { mode: 0o755 });
+            results.push({ wrapperPath, originalPath, success: true });
+        }
+        catch (err) {
+            results.push({
+                wrapperPath, originalPath, success: false,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    return results;
+}
+export function buildWrapperScript(originalPath, capabilities, hookTimeoutMs) {
+    const scrubRules = {};
+    for (const [event, caps] of Object.entries(capabilities.events)) {
+        const deleteFields = [];
+        if (!caps.supportsAdditionalContext)
+            deleteFields.push("additionalContext");
+        const allowedPermissionValues = caps.permissionDecisionValues ?? null;
+        if (deleteFields.length > 0 || allowedPermissionValues !== null) {
+            scrubRules[event] = { deleteFields, allowedPermissionValues };
+        }
+    }
+    const escapedOriginalPath = JSON.stringify(originalPath);
+    const scrubRulesJson = JSON.stringify(scrubRules);
+    const effectiveTimeout = hookTimeoutMs ?? 30000;
+    return `#!/usr/bin/env node
+// AUTO-GENERATED by mewkit migrate — DO NOT EDIT
+// Codex hook compatibility wrapper for:
+//   ${originalPath}
+"use strict";
+
+const { spawnSync } = require("node:child_process");
+
+const ORIGINAL_HOOK = ${escapedOriginalPath};
+const SCRUB_RULES = ${scrubRulesJson};
+const HOOK_TIMEOUT_MS = ${effectiveTimeout};
+
+function getEventFromStdin(stdinData) {
+  try {
+    const parsed = JSON.parse(stdinData);
+    return parsed.hook_event_name || parsed.event || null;
+  } catch {
+    return null;
+  }
+}
+
+function sanitizeOutput(obj, rules) {
+  if (!obj || typeof obj !== "object" || Array.isArray(obj)) return obj;
+  const result = Object.assign({}, obj);
+  for (const field of rules.deleteFields) delete result[field];
+  if (rules.allowedPermissionValues !== null) {
+    const allowed = new Set(rules.allowedPermissionValues);
+    if (result.permissionDecision !== undefined && !allowed.has(result.permissionDecision)) {
+      delete result.permissionDecision;
+    }
+    if (result.decision !== undefined && !allowed.has(result.decision)) delete result.decision;
+  }
+  return result;
+}
+
+function eventSupportsDeny(rules) {
+  if (!rules || rules.allowedPermissionValues === null) return false;
+  return rules.allowedPermissionValues.indexOf("deny") !== -1;
+}
+
+function emitDeny(reason) {
+  process.stdout.write(JSON.stringify({
+    permissionDecision: "deny",
+    reason: reason && reason.length > 0 ? reason : "Hook blocked this operation",
+  }));
+  process.exit(0);
+}
+
+function main() {
+  const stdinChunks = [];
+  process.stdin.on("data", (chunk) => stdinChunks.push(chunk));
+  process.stdin.on("end", () => {
+    const stdinData = Buffer.concat(stdinChunks).toString("utf8");
+    const event = getEventFromStdin(stdinData);
+    const rules = event && SCRUB_RULES[event];
+
+    const result = spawnSync(process.execPath, [ORIGINAL_HOOK], {
+      input: stdinData,
+      env: process.env,
+      encoding: "utf8",
+      timeout: HOOK_TIMEOUT_MS,
+    });
+
+    if (result.error) {
+      if (result.stderr) process.stderr.write(result.stderr);
+      process.exit(1);
+    }
+
+    const stderrText = (result.stderr || "").toString();
+    const rawOutput = (result.stdout || "").toString();
+    const exitCode = result.status ?? 1;
+    const isBlockSignal = exitCode === 2 && eventSupportsDeny(rules);
+
+    if (!rawOutput.trim()) {
+      if (isBlockSignal) return emitDeny(stderrText.trim());
+      if (stderrText) process.stderr.write(stderrText);
+      process.exit(exitCode);
+    }
+
+    let parsed;
+    try {
+      parsed = JSON.parse(rawOutput);
+    } catch {
+      if (isBlockSignal) {
+        const reason = rawOutput.trim() || stderrText.trim();
+        return emitDeny(reason);
+      }
+      if (stderrText) process.stderr.write(stderrText);
+      process.stdout.write(rawOutput);
+      process.exit(exitCode);
+    }
+
+    if (stderrText) process.stderr.write(stderrText);
+
+    const sanitized = rules ? sanitizeOutput(parsed, rules) : parsed;
+
+    if (isBlockSignal && (!sanitized || sanitized.permissionDecision !== "deny")) {
+      return emitDeny(stderrText.trim());
+    }
+
+    process.stdout.write(JSON.stringify(sanitized));
+    process.exit(isBlockSignal ? 0 : exitCode);
+  });
+}
+
+main();
+`;
+}
+//# sourceMappingURL=codex-hook-wrapper.js.map

package/dist/migrate/hooks/codex-hook-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hook-wrapper.js","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-hook-wrapper.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,kFAAkF;AAClF,gGAAgG;AAChG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAS9D,SAAS,eAAe,CAAC,YAAoB;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC;IACpD,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,aAAuB,EACvB,UAAkB,EAClB,YAA+B,EAC/B,cAAuC;IAEvC,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE/C,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QAEvD,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC;gBACZ,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK;gBACzC,KAAK,EAAE,wBAAwB,WAAW,YAAY,kBAAkB,EAAE;aAC1E,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QAED,IAAI,CAAC;YACJ,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;YAC3C,MAAM,aAAa,GAAG,cAAc,EAAE,CAAC,YAAY,CAAC,IAAI,cAAc,EAAE,CAAC,YAAY,CAAC,CAAC;YACvF,MAAM,OAAO,GAAG,kBAAkB,CAAC,YAAY,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;YAC9E,aAAa,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC;gBACZ,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK;gBACzC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAOD,MAAM,UAAU,kBAAkB,CACjC,YAAoB,EACpB,YAA+B,EAC/B,aAAsB;IAEtB,MAAM,UAAU,GAAoC,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,yBAAyB;YAAE,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5E,MAAM,uBAAuB,GAAG,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC;QACtE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,uBAAuB,KAAK,IAAI,EAAE,CAAC;YACjE,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,uBAAuB,EAAE,CAAC;QAC/D,CAAC;IACF,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,aAAa,IAAI,KAAK,CAAC;IAEhD,OAAO;;;OAGD,YAAY;;;;;wBAKK,mBAAmB;sBACrB,cAAc;0BACV,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgGzC,CAAC;AACF,CAAC"}

package/dist/migrate/hooks/codex-path-safety.d.ts

@@ -0,0 +1,5 @@
+export declare function isPathWithinBoundary(targetPath: string, boundaryPath: string): boolean;
+export declare function isCanonicalPathWithinBoundary(targetPath: string, boundaryPath: string): Promise<boolean>;
+export declare function withCodexTargetLock<T>(targetFilePath: string, operation: () => Promise<T>): Promise<T>;
+export declare function getCodexGlobalBoundary(): string;
+//# sourceMappingURL=codex-path-safety.d.ts.map

package/dist/migrate/hooks/codex-path-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-path-safety.d.ts","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-path-safety.ts"],"names":[],"mappings":"AASA,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAMtF;AAUD,wBAAsB,6BAA6B,CAClD,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAIlB;AAuDD,wBAAsB,mBAAmB,CAAC,CAAC,EAC1C,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACzB,OAAO,CAAC,CAAC,CAAC,CAaZ;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C"}

package/dist/migrate/hooks/codex-path-safety.js

@@ -0,0 +1,99 @@
+// Vendored from claudekit-cli (MIT). Source: src/commands/portable/codex-path-safety.ts
+// Adapted: PID-based lock instead of proper-lockfile (no new dep).
+import { existsSync } from "node:fs";
+import { mkdir, readFile, realpath, unlink, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join, resolve, sep } from "node:path";
+const STALE_LOCK_MS = 60 * 1000;
+export function isPathWithinBoundary(targetPath, boundaryPath) {
+    const resolvedTarget = resolve(targetPath);
+    const resolvedBoundary = resolve(boundaryPath);
+    return (resolvedTarget === resolvedBoundary || resolvedTarget.startsWith(`${resolvedBoundary}${sep}`));
+}
+async function resolveRealPathSafe(path) {
+    try {
+        return await realpath(path);
+    }
+    catch {
+        return resolve(path);
+    }
+}
+export async function isCanonicalPathWithinBoundary(targetPath, boundaryPath) {
+    const canonicalTarget = await resolveRealPathSafe(targetPath);
+    const canonicalBoundary = await resolveRealPathSafe(boundaryPath);
+    return isPathWithinBoundary(canonicalTarget, canonicalBoundary);
+}
+function getCodexLockPath(targetFilePath) {
+    return join(dirname(resolve(targetFilePath)), ".config.toml.mewkit-codex.lock");
+}
+function isProcessAlive(pid) {
+    if (!Number.isFinite(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function acquireCodexLock(lockPath) {
+    const startTime = Date.now();
+    while (true) {
+        try {
+            await writeFile(lockPath, `${process.pid}\n${Date.now()}\n`, { encoding: "utf-8", flag: "wx" });
+            return;
+        }
+        catch (err) {
+            const e = err;
+            if (e.code !== "EEXIST")
+                throw err;
+        }
+        try {
+            const content = (await readFile(lockPath, "utf-8")).trim();
+            const [pidStr, tsStr] = content.split("\n");
+            const pid = Number.parseInt(pidStr ?? "", 10);
+            const ts = Number.parseInt(tsStr ?? "", 10);
+            if (!isProcessAlive(pid) || (Number.isFinite(ts) && Date.now() - ts > STALE_LOCK_MS)) {
+                try {
+                    await unlink(lockPath);
+                }
+                catch { /* race */ }
+                continue;
+            }
+        }
+        catch {
+            // Lock disappeared between checks
+        }
+        if (Date.now() - startTime > 10_000) {
+            throw new Error(`Could not acquire Codex lock at ${lockPath} within 10s`);
+        }
+        await new Promise((r) => setTimeout(r, 100));
+    }
+}
+async function releaseCodexLock(lockPath) {
+    try {
+        await unlink(lockPath);
+    }
+    catch {
+        // Best-effort
+    }
+}
+export async function withCodexTargetLock(targetFilePath, operation) {
+    const resolvedTargetPath = resolve(targetFilePath);
+    const dir = dirname(resolvedTargetPath);
+    if (!existsSync(dir))
+        await mkdir(dir, { recursive: true });
+    const lockPath = getCodexLockPath(resolvedTargetPath);
+    await acquireCodexLock(lockPath);
+    try {
+        return await operation();
+    }
+    finally {
+        await releaseCodexLock(lockPath);
+    }
+}
+export function getCodexGlobalBoundary() {
+    return join(homedir(), ".codex");
+}
+//# sourceMappingURL=codex-path-safety.js.map

package/dist/migrate/hooks/codex-path-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-path-safety.js","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-path-safety.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,mEAAmE;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAExD,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhC,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,YAAoB;IAC5E,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,OAAO,CACN,cAAc,KAAK,gBAAgB,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,GAAG,EAAE,CAAC,CAC7F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACJ,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,UAAkB,EAClB,YAAoB;IAEpB,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClE,OAAO,oBAAoB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,cAAsB;IAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,IAAI,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAChG,OAAO;QACR,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,GAA4B,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QACpC,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC;gBACtF,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;gBACpD,SAAS;YACV,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,kCAAkC;QACnC,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,aAAa,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;AACF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,cAAc;IACf,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,cAAsB,EACtB,SAA2B;IAE3B,MAAM,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAExC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC;QACJ,OAAO,MAAM,SAAS,EAAE,CAAC;IAC1B,CAAC;YAAS,CAAC;QACV,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB;IACrC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/dist/migrate/hooks/codex-toml-installer.d.ts

@@ -0,0 +1,15 @@
+import type { PortableItem, ProviderType } from "../types.js";
+export interface CodexInstallResult {
+    provider: ProviderType;
+    success: boolean;
+    written: number;
+    error?: string;
+}
+/**
+ * Install Codex agents: write per-agent .toml + merge managed block in config.toml.
+ * Atomic per-file; transactional rollback if config.toml merge fails.
+ */
+export declare function installCodexAgents(agents: PortableItem[], options: {
+    global: boolean;
+}): Promise<CodexInstallResult>;
+//# sourceMappingURL=codex-toml-installer.d.ts.map

package/dist/migrate/hooks/codex-toml-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-toml-installer.d.ts","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-toml-installer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAU9D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAoCD;;;GAGG;AACH,wBAAsB,kBAAkB,CACvC,MAAM,EAAE,YAAY,EAAE,EACtB,OAAO,EAAE;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CAyE7B"}

package/dist/migrate/hooks/codex-toml-installer.js

@@ -0,0 +1,124 @@
+// Adapted from claudekit-cli (MIT). Source: src/commands/portable/codex-toml-installer.ts
+// Lean version: writes per-agent .toml files + merges sentinel-bracketed [agents.X] block
+// into config.toml. Drops dashboard-UI integration and the broader claudekit feature set.
+import { existsSync } from "node:fs";
+import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { computeContentChecksum } from "../reconcile/checksum-utils.js";
+import { buildCodexConfigEntry } from "../converters/fm-to-codex-toml.js";
+import { convertItem } from "../converters/index.js";
+import { addPortableInstallation, removePortableInstallation } from "../reconcile/portable-registry.js";
+import { providers } from "../provider-registry.js";
+import { getCodexGlobalBoundary, isCanonicalPathWithinBoundary, withCodexTargetLock, } from "./codex-path-safety.js";
+const SENTINEL_START = "# --- mewkit-managed-agents-start ---";
+const SENTINEL_END = "# --- mewkit-managed-agents-end ---";
+async function ensureDir(filePath) {
+    const dir = dirname(filePath);
+    if (!existsSync(dir))
+        await mkdir(dir, { recursive: true });
+}
+async function atomicWrite(target, content) {
+    await ensureDir(target);
+    const tmp = `${target}.mewkit-tmp-${process.pid}`;
+    try {
+        await writeFile(tmp, content, "utf-8");
+        await rename(tmp, target);
+    }
+    catch (err) {
+        try {
+            await unlink(tmp);
+        }
+        catch { /* best-effort */ }
+        throw err;
+    }
+}
+function stripManagedBlock(content) {
+    const startIdx = content.indexOf(SENTINEL_START);
+    if (startIdx === -1)
+        return content;
+    const endIdx = content.indexOf(SENTINEL_END, startIdx);
+    if (endIdx === -1)
+        return content;
+    const blockEnd = endIdx + SENTINEL_END.length;
+    const after = content[blockEnd] === "\n" ? blockEnd + 1 : blockEnd;
+    let before = startIdx;
+    if (before > 0 && content[before - 1] === "\n")
+        before -= 1;
+    return content.slice(0, before) + content.slice(after);
+}
+function buildManagedBlock(entries) {
+    if (entries.length === 0)
+        return "";
+    return `${SENTINEL_START}\n${entries.join("\n\n")}\n${SENTINEL_END}\n`;
+}
+/**
+ * Install Codex agents: write per-agent .toml + merge managed block in config.toml.
+ * Atomic per-file; transactional rollback if config.toml merge fails.
+ */
+export async function installCodexAgents(agents, options) {
+    const config = providers.codex.agents;
+    if (!config) {
+        return { provider: "codex", success: false, written: 0, error: "Codex agents not configured" };
+    }
+    const agentsDir = options.global ? config.globalPath : config.projectPath;
+    if (!agentsDir) {
+        return { provider: "codex", success: false, written: 0, error: "No Codex agents path" };
+    }
+    const codexRoot = options.global ? getCodexGlobalBoundary() : resolve(dirname(agentsDir));
+    const configTomlPath = options.global
+        ? join(getCodexGlobalBoundary(), "config.toml")
+        : join(resolve(dirname(agentsDir)), "config.toml");
+    if (!(await isCanonicalPathWithinBoundary(agentsDir, codexRoot))) {
+        return { provider: "codex", success: false, written: 0, error: "Unsafe Codex path" };
+    }
+    return withCodexTargetLock(configTomlPath, async () => {
+        const writtenFiles = [];
+        const entries = [];
+        try {
+            for (const agent of agents) {
+                const result = convertItem(agent, "fm-to-codex-toml", "codex");
+                if (result.error)
+                    continue;
+                const targetPath = join(agentsDir, result.filename);
+                await atomicWrite(targetPath, result.content);
+                writtenFiles.push(targetPath);
+                const sourceChecksum = computeContentChecksum(agent.body);
+                const targetChecksum = computeContentChecksum(result.content);
+                await addPortableInstallation(agent.name, "agent", "codex", options.global, targetPath, agent.sourcePath, { sourceChecksum, targetChecksum, installSource: "kit" });
+                entries.push(buildCodexConfigEntry(agent.name, agent.description));
+            }
+            let configContent = "";
+            if (existsSync(configTomlPath)) {
+                configContent = await readFile(configTomlPath, "utf-8");
+            }
+            const stripped = stripManagedBlock(configContent);
+            const block = buildManagedBlock(entries);
+            const separator = stripped.length === 0 ? "" : stripped.endsWith("\n") ? "\n" : "\n\n";
+            const merged = block ? `${stripped}${separator}${block}` : stripped;
+            await atomicWrite(configTomlPath, merged);
+            return { provider: "codex", success: true, written: writtenFiles.length };
+        }
+        catch (err) {
+            // Best-effort rollback: delete files we wrote and registry entries we added
+            for (const path of writtenFiles) {
+                try {
+                    await unlink(path);
+                }
+                catch { /* ignore */ }
+            }
+            for (const agent of agents) {
+                try {
+                    await removePortableInstallation(agent.name, "agent", "codex", options.global);
+                }
+                catch { /* ignore */ }
+            }
+            return {
+                provider: "codex",
+                success: false,
+                written: writtenFiles.length,
+                error: err instanceof Error ? err.message : String(err),
+            };
+        }
+    });
+}
+//# sourceMappingURL=codex-toml-installer.js.map

package/dist/migrate/hooks/codex-toml-installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-toml-installer.js","sourceRoot":"","sources":["../../../src/migrate/hooks/codex-toml-installer.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,0FAA0F;AAC1F,0FAA0F;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AACxG,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,EACN,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,GACnB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,cAAc,GAAG,uCAAuC,CAAC;AAC/D,MAAM,YAAY,GAAG,qCAAqC,CAAC;AAS3D,KAAK,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,OAAe;IACzD,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,GAAG,MAAM,eAAe,OAAO,CAAC,GAAG,EAAE,CAAC;IAClD,IAAI,CAAC;QACJ,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,GAAG,CAAC;IACX,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,IAAI,MAAM,GAAG,QAAQ,CAAC;IACtB,IAAI,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAiB;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,GAAG,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,YAAY,IAAI,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,MAAsB,EACtB,OAA4B;IAE5B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;IAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM;QACpC,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,aAAa,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAEpD,IAAI,CAAC,CAAC,MAAM,6BAA6B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACtF,CAAC;IAED,OAAO,mBAAmB,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,IAAI,CAAC;YACJ,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;gBAC/D,IAAI,MAAM,CAAC,KAAK;oBAAE,SAAS;gBAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACpD,MAAM,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9C,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAE9B,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,cAAc,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9D,MAAM,uBAAuB,CAC5B,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAC1E,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,EAAE,CACxD,CAAC;gBAEF,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAChC,aAAa,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YACvF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAEpE,MAAM,WAAW,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAE1C,OAAO,EAAE,QAAQ,EAAE,OAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,4EAA4E;YAC5E,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;gBACjC,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACnD,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACJ,MAAM,0BAA0B,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChF,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACzB,CAAC;YACD,OAAO;gBACN,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,YAAY,CAAC,MAAM;gBAC5B,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/migrate/hooks/hooks-settings-merger.d.ts

@@ -0,0 +1,20 @@
+import { type HookEntry } from "../converters/index.js";
+import type { PortableItem, ProviderType } from "../types.js";
+export interface HooksMergeResult {
+    provider: ProviderType;
+    success: boolean;
+    settingsPath?: string;
+    hooksWritten: number;
+    hooksDropped: number;
+    error?: string;
+    warnings: string[];
+}
+/**
+ * Top-level dispatch. Routes to the per-provider merger.
+ * `hookTargetPaths` maps source hook name → installed target path (per-file installer).
+ */
+export declare function mergeHooksSettings(provider: ProviderType, hooks: PortableItem[], hookTargetPaths: Map<string, string>, options: {
+    global: boolean;
+}): Promise<HooksMergeResult>;
+export type { HookEntry };
+//# sourceMappingURL=hooks-settings-merger.d.ts.map

package/dist/migrate/hooks/hooks-settings-merger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-settings-merger.d.ts","sourceRoot":"","sources":["../../../src/migrate/hooks/hooks-settings-merger.ts"],"names":[],"mappings":"AAOA,OAAO,EAKN,KAAK,SAAS,EAId,MAAM,wBAAwB,CAAC;AAGhC,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAM9D,MAAM,WAAW,gBAAgB;IAChC,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AA2QD;;;GAGG;AACH,wBAAsB,kBAAkB,CACvC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,YAAY,EAAE,EACrB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACpC,OAAO,EAAE;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CAgB3B;AAED,YAAY,EAAE,SAAS,EAAE,CAAC"}