mthds 0.4.1 → 0.6.0

package/README.md

@@ -46,10 +46,9 @@ The CLI will:
 1. Fetch the `methods/` folder from the GitHub repository
 2. Validate each method's `METHODS.toml` manifest
 3. If `--method <name>` is provided, install only that method (errors if name not found)
-4. Ask which AI agent to install it for (Claude Code, with more coming soon)
-5. Ask where to install — **local** (current project) or **global** (your machine)
-6. Optionally install a [runner](#runners)
-7. Copy all `.mthds` files to `.claude/methods/<name>/`
+4. Ask where to install — **local** (current project) or **global** (your machine)
+5. Optionally install a [runner](#runners)
+6. Copy all `.mthds` files to `.mthds/methods/<name>/`
 
 You can also install from a local directory:
 
@@ -61,8 +60,8 @@ npx mthds install --local /path/to/repo
 
 | Location | Path |
 |----------|------|
-| Local | `<cwd>/.claude/methods/<name>/` |
-| Global | `~/.claude/methods/<name>/` |
+| Local | `<cwd>/.mthds/methods/<name>/` |
+| Global | `~/.mthds/methods/<name>/` |
 
 ## Publishing a method
 

package/dist/agent/binaries.d.ts

@@ -4,6 +4,11 @@
  * version_constraint is a semver range (e.g. ">=0.22.0") checked against the
  * output of `<binary> --version`.  Use buildInstallCommand() to get the
  * canonical install command — single source of truth.
+ *
+ * Each BINARY_RECOVERY entry spreads a shared `*_PKG` constant that holds
+ * the per-PyPI-package metadata (constraint, install URL, etc.). To bump a
+ * minimum version, edit the constant — never the per-binary entry — so that
+ * binaries shipping from the same package can never drift.
  */
 export interface BinaryRecoveryInfo {
     binary: string;

package/dist/agent/binaries.js

@@ -4,6 +4,11 @@
  * version_constraint is a semver range (e.g. ">=0.22.0") checked against the
  * output of `<binary> --version`.  Use buildInstallCommand() to get the
  * canonical install command — single source of truth.
+ *
+ * Each BINARY_RECOVERY entry spreads a shared `*_PKG` constant that holds
+ * the per-PyPI-package metadata (constraint, install URL, etc.). To bump a
+ * minimum version, edit the constant — never the per-binary entry — so that
+ * binaries shipping from the same package can never drift.
  */
 /**
  * Build the canonical install/upgrade command string for a binary.
@@ -13,33 +18,27 @@ export function buildInstallCommand(recovery) {
 }
 /** Shared version-extract regex: `<name> <semver>` */
 const VERSION_RE = /^[\w-]+\s+(\d+\.\d+\.\d+)/;
+/** Shared metadata for the `pipelex` PyPI package — provides both `pipelex` and `pipelex-agent` binaries. */
+const PIPELEX_PKG = {
+    package: "pipelex",
+    uv_package: "pipelex",
+    version_constraint: ">=0.25.0",
+    version_extract: VERSION_RE,
+    install_url: "https://pypi.org/project/pipelex/",
+    auto_installable: true,
+};
+/** Shared metadata for the `pipelex-tools` PyPI package — provides the `plxt` binary. */
+const PIPELEX_TOOLS_PKG = {
+    package: "pipelex-tools",
+    uv_package: "pipelex-tools",
+    version_constraint: ">=0.3.3",
+    version_extract: VERSION_RE,
+    install_url: "https://pypi.org/project/pipelex-tools/",
+    auto_installable: true,
+};
 export const BINARY_RECOVERY = {
-    pipelex: {
-        binary: "pipelex",
-        package: "pipelex",
-        uv_package: "pipelex",
-        version_constraint: ">=0.23.5",
-        version_extract: VERSION_RE,
-        install_url: "https://pypi.org/project/pipelex/",
-        auto_installable: true,
-    },
-    "pipelex-agent": {
-        binary: "pipelex-agent",
-        package: "pipelex",
-        uv_package: "pipelex",
-        version_constraint: ">=0.23.5",
-        version_extract: VERSION_RE,
-        install_url: "https://pypi.org/project/pipelex/",
-        auto_installable: true,
-    },
-    plxt: {
-        binary: "plxt",
-        package: "pipelex-tools",
-        uv_package: "pipelex-tools",
-        version_constraint: ">=0.3.2",
-        version_extract: VERSION_RE,
-        install_url: "https://pypi.org/project/pipelex-tools/",
-        auto_installable: true,
-    },
+    pipelex: { binary: "pipelex", ...PIPELEX_PKG },
+    "pipelex-agent": { binary: "pipelex-agent", ...PIPELEX_PKG },
+    plxt: { binary: "plxt", ...PIPELEX_TOOLS_PKG },
 };
 //# sourceMappingURL=binaries.js.map

package/dist/agent/binaries.js.map

@@ -1 +1 @@
-{"version":3,"file":"binaries.js","sourceRoot":"","sources":["../../src/agent/binaries.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA4B;IAC9D,OAAO,8BAA8B,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,kBAAkB,GAAG,CAAC;AAC5F,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAE/C,MAAM,CAAC,MAAM,eAAe,GAAuC;IACjE,OAAO,EAAE;QACP,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS;QAClB,UAAU,EAAE,SAAS;QACrB,kBAAkB,EAAE,UAAU;QAC9B,eAAe,EAAE,UAAU;QAC3B,WAAW,EAAE,mCAAmC;QAChD,gBAAgB,EAAE,IAAI;KACvB;IACD,eAAe,EAAE;QACf,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,SAAS;QAClB,UAAU,EAAE,SAAS;QACrB,kBAAkB,EAAE,UAAU;QAC9B,eAAe,EAAE,UAAU;QAC3B,WAAW,EAAE,mCAAmC;QAChD,gBAAgB,EAAE,IAAI;KACvB;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,eAAe;QACxB,UAAU,EAAE,eAAe;QAC3B,kBAAkB,EAAE,SAAS;QAC7B,eAAe,EAAE,UAAU;QAC3B,WAAW,EAAE,yCAAyC;QACtD,gBAAgB,EAAE,IAAI;KACvB;CACF,CAAC"}
+{"version":3,"file":"binaries.js","sourceRoot":"","sources":["../../src/agent/binaries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAeH;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA4B;IAC9D,OAAO,8BAA8B,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,kBAAkB,GAAG,CAAC;AAC5F,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAE/C,6GAA6G;AAC7G,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,SAAS;IACrB,kBAAkB,EAAE,UAAU;IAC9B,eAAe,EAAE,UAAU;IAC3B,WAAW,EAAE,mCAAmC;IAChD,gBAAgB,EAAE,IAAI;CACd,CAAC;AAEX,yFAAyF;AACzF,MAAM,iBAAiB,GAAG;IACxB,OAAO,EAAE,eAAe;IACxB,UAAU,EAAE,eAAe;IAC3B,kBAAkB,EAAE,SAAS;IAC7B,eAAe,EAAE,UAAU;IAC3B,WAAW,EAAE,yCAAyC;IACtD,gBAAgB,EAAE,IAAI;CACd,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAuC;IACjE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE;IAC9C,eAAe,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,WAAW,EAAE;IAC5D,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,iBAAiB,EAAE;CAC/C,CAAC"}

package/dist/agent/commands/codex-config.d.ts

@@ -0,0 +1,51 @@
+/**
+ * mthds-agent codex apply-config — additively merge required Codex sandbox
+ * settings into ~/.codex/config.toml so the mthds PostToolUse hook can run
+ * without being blocked by Codex's default workspace-write sandbox.
+ *
+ * Currently the only required key is `[sandbox_workspace_write] network_access = true`.
+ * Without it, any hook that fetches remote pipelex config (or any other
+ * outbound request) hangs/fails inside the sandbox.
+ *
+ * Warning-only checks (we never modify these — too high-risk):
+ *   - `[features] codex_hooks = false` — explicitly disables hooks
+ *     (default is on as of Codex 0.124.0; codex-rs/features/src/lib.rs:768).
+ *   - `sandbox_mode = "read-only"` — hook can't run apply_patch validation.
+ *
+ * Output statuses (via agentSuccess):
+ *   - { status: "ALREADY_OK", config_file, warnings? }     — no changes needed
+ *   - { status: "APPLIED", config_file, applied, warnings? } — diff merged + written
+ *   - { status: "WOULD_APPLY", config_file, applied, warnings? } — --dry-run only
+ *
+ * Flags:
+ *   --check    exits non-zero if anything would change (no writes, no warnings demoted)
+ *   --dry-run  prints proposed diff and exits 0 without touching the file
+ */
+export interface AppliedChange {
+    table: string;
+    key: string;
+    value: string;
+}
+export interface CodexConfigWarning {
+    code: string;
+    message: string;
+}
+export interface CodexConfigInspection {
+    config_file: string;
+    exists: boolean;
+    needs_change: AppliedChange | null;
+    warnings: CodexConfigWarning[];
+    parse_error?: string;
+}
+interface ApplyConfigOptions {
+    check?: boolean;
+    dryRun?: boolean;
+}
+/**
+ * Read-only inspection of ~/.codex/config.toml. Used by doctor to surface
+ * issues without writing anything. Never throws — parse errors are reported
+ * via the `parse_error` field so the caller can decide how to render them.
+ */
+export declare function inspectCodexConfig(): CodexConfigInspection;
+export declare function agentCodexApplyConfig(options?: ApplyConfigOptions): Promise<void>;
+export {};

package/dist/agent/commands/codex-config.js

@@ -0,0 +1,301 @@
+/**
+ * mthds-agent codex apply-config — additively merge required Codex sandbox
+ * settings into ~/.codex/config.toml so the mthds PostToolUse hook can run
+ * without being blocked by Codex's default workspace-write sandbox.
+ *
+ * Currently the only required key is `[sandbox_workspace_write] network_access = true`.
+ * Without it, any hook that fetches remote pipelex config (or any other
+ * outbound request) hangs/fails inside the sandbox.
+ *
+ * Warning-only checks (we never modify these — too high-risk):
+ *   - `[features] codex_hooks = false` — explicitly disables hooks
+ *     (default is on as of Codex 0.124.0; codex-rs/features/src/lib.rs:768).
+ *   - `sandbox_mode = "read-only"` — hook can't run apply_patch validation.
+ *
+ * Output statuses (via agentSuccess):
+ *   - { status: "ALREADY_OK", config_file, warnings? }     — no changes needed
+ *   - { status: "APPLIED", config_file, applied, warnings? } — diff merged + written
+ *   - { status: "WOULD_APPLY", config_file, applied, warnings? } — --dry-run only
+ *
+ * Flags:
+ *   --check    exits non-zero if anything would change (no writes, no warnings demoted)
+ *   --dry-run  prints proposed diff and exits 0 without touching the file
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { homedir } from "node:os";
+import { parse as parseToml } from "smol-toml";
+import { agentError, agentSuccess, AGENT_ERROR_DOMAINS } from "../output.js";
+// ── Constants ──────────────────────────────────────────────────────
+//
+// Single-key invariant: this command currently enforces exactly one
+// (table, key, value) tuple. `diffRequired` and `collectWarnings` are
+// structured around that assumption — if a future requirement adds a
+// second required key (e.g. a sandbox_mode default), both will need to
+// fan out to a list rather than the singleton structure used here.
+const REQUIRED_TABLE = "sandbox_workspace_write";
+const REQUIRED_KEY = "network_access";
+const REQUIRED_VALUE = true;
+// ── Helpers ────────────────────────────────────────────────────────
+function configFilePath() {
+    return join(homedir(), ".codex", "config.toml");
+}
+function writeAtomic(path, contents) {
+    mkdirSync(dirname(path), { recursive: true });
+    const tmp = `${path}.tmp-${process.pid}-${Date.now()}`;
+    writeFileSync(tmp, contents, { encoding: "utf8", mode: 0o644 });
+    renameSync(tmp, path);
+}
+/**
+ * Append a [table] section with key=value to existing TOML text. Used when
+ * the table is missing entirely. We append rather than re-serialize so user
+ * formatting/comments elsewhere in the file are preserved verbatim.
+ */
+function appendTomlTable(existing, table, key, value) {
+    const trimmed = existing.replace(/\s+$/, "");
+    const sep = trimmed.length === 0 ? "" : "\n\n";
+    return `${trimmed}${sep}[${table}]\n${key} = ${value}\n`;
+}
+/**
+ * Insert key=value into an existing [table] section without re-serializing
+ * the document. Locates the table header line, finds the end of its body
+ * (next [section] header or EOF), and inserts the line just before that
+ * boundary. This preserves comments and ordering of every other table.
+ */
+function insertIntoExistingTable(existing, table, key, value) {
+    const lines = existing.split("\n");
+    const headerRegex = new RegExp(`^\\s*\\[\\s*${table.replace(/[.*+?^${}()|[\\]\\\\]/g, "\\$&")}\\s*\\]\\s*(#.*)?$`);
+    // Treat both `[table]` and `[[array_of_tables]]` as section boundaries —
+    // the inner `\[\[?...\]\]?` lets the boundary scan stop at array-of-tables
+    // headers too, so we don't accidentally insert into one.
+    const anyHeaderRegex = /^\s*\[\[?[^\]]+\]\]?\s*(#.*)?$/;
+    let tableStart = -1;
+    for (let i = 0; i < lines.length; i++) {
+        if (headerRegex.test(lines[i])) {
+            tableStart = i;
+            break;
+        }
+    }
+    if (tableStart === -1) {
+        // Caller should have used appendTomlTable; defensive fallback.
+        return appendTomlTable(existing, table, key, value);
+    }
+    let insertAt = lines.length;
+    for (let i = tableStart + 1; i < lines.length; i++) {
+        if (anyHeaderRegex.test(lines[i])) {
+            insertAt = i;
+            break;
+        }
+    }
+    // Walk back over trailing blank lines so the new key sits with its table.
+    while (insertAt > tableStart + 1 && lines[insertAt - 1].trim() === "") {
+        insertAt--;
+    }
+    const before = lines.slice(0, insertAt);
+    const after = lines.slice(insertAt);
+    const newLine = `${key} = ${value}`;
+    return [...before, newLine, ...after].join("\n");
+}
+/**
+ * Decide whether the parsed config already satisfies the required key.
+ * Returns null if satisfied, otherwise an AppliedChange describing what
+ * needs to be added.
+ */
+function diffRequired(parsed) {
+    const table = parsed[REQUIRED_TABLE];
+    if (table &&
+        typeof table === "object" &&
+        !Array.isArray(table) &&
+        table[REQUIRED_KEY] === REQUIRED_VALUE) {
+        return null;
+    }
+    return {
+        table: REQUIRED_TABLE,
+        key: REQUIRED_KEY,
+        value: String(REQUIRED_VALUE),
+    };
+}
+/** Collect non-fatal warnings about the user's config without modifying it. */
+function collectWarnings(parsed) {
+    const warnings = [];
+    const features = parsed.features;
+    if (features &&
+        typeof features === "object" &&
+        !Array.isArray(features) &&
+        features.codex_hooks === false) {
+        warnings.push({
+            code: "CODEX_HOOKS_DISABLED",
+            message: "[features] codex_hooks is explicitly set to false; the mthds hook will not load. Remove this key (Codex 0.124+ enables hooks by default).",
+        });
+    }
+    if (parsed.sandbox_mode === "read-only") {
+        warnings.push({
+            code: "SANDBOX_READ_ONLY",
+            message: 'sandbox_mode = "read-only" prevents the apply_patch hook from running. Set to "workspace-write" or remove the key.',
+        });
+    }
+    return warnings;
+}
+/**
+ * Read-only inspection of ~/.codex/config.toml. Used by doctor to surface
+ * issues without writing anything. Never throws — parse errors are reported
+ * via the `parse_error` field so the caller can decide how to render them.
+ */
+export function inspectCodexConfig() {
+    const file = configFilePath();
+    const exists = existsSync(file);
+    if (!exists) {
+        // No config file ⇒ definitely needs a change (the required key is missing).
+        return {
+            config_file: file,
+            exists: false,
+            needs_change: {
+                table: REQUIRED_TABLE,
+                key: REQUIRED_KEY,
+                value: String(REQUIRED_VALUE),
+            },
+            warnings: [],
+        };
+    }
+    let raw = "";
+    try {
+        raw = readFileSync(file, "utf8");
+    }
+    catch (err) {
+        return {
+            config_file: file,
+            exists: true,
+            needs_change: null,
+            warnings: [],
+            parse_error: `Failed to read ${file}: ${err.message}`,
+        };
+    }
+    let parsed;
+    try {
+        parsed = raw.trim().length === 0 ? {} : parseToml(raw);
+    }
+    catch (err) {
+        return {
+            config_file: file,
+            exists: true,
+            needs_change: null,
+            warnings: [],
+            parse_error: err.message,
+        };
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        return {
+            config_file: file,
+            exists: true,
+            needs_change: null,
+            warnings: [],
+            parse_error: "Top-level value is not a TOML table",
+        };
+    }
+    return {
+        config_file: file,
+        exists: true,
+        needs_change: diffRequired(parsed),
+        warnings: collectWarnings(parsed),
+    };
+}
+// ── Main ───────────────────────────────────────────────────────────
+export async function agentCodexApplyConfig(options = {}) {
+    const file = configFilePath();
+    const checkMode = options.check === true;
+    const dryRunMode = options.dryRun === true;
+    let raw = "";
+    if (existsSync(file)) {
+        try {
+            raw = readFileSync(file, "utf8");
+        }
+        catch (err) {
+            agentError(`Failed to read ${file}: ${err.message}`, "IOError", { error_domain: AGENT_ERROR_DOMAINS.IO });
+            return;
+        }
+    }
+    let parsed;
+    try {
+        parsed = raw.trim().length === 0 ? {} : parseToml(raw);
+    }
+    catch (err) {
+        agentError(`Invalid TOML in ${file}: ${err.message}. Fix the file by hand or delete it and re-run.`, "ConfigError", { error_domain: AGENT_ERROR_DOMAINS.CONFIG });
+        return;
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        agentError(`${file} does not contain a TOML table at the top level.`, "ConfigError", { error_domain: AGENT_ERROR_DOMAINS.CONFIG });
+        return;
+    }
+    const change = diffRequired(parsed);
+    const warnings = collectWarnings(parsed);
+    // --check mode: exit non-zero if anything would change. Warnings count
+    // because they signal explicit user state that breaks the hook.
+    if (checkMode) {
+        if (change || warnings.length > 0) {
+            agentError(`Codex config needs attention. Run 'mthds-agent codex apply-config' (and review warnings).`, "ConfigError", { error_domain: AGENT_ERROR_DOMAINS.CONFIG });
+            return;
+        }
+        agentSuccess({ status: "ALREADY_OK", config_file: file });
+        return;
+    }
+    if (!change) {
+        agentSuccess({
+            status: "ALREADY_OK",
+            config_file: file,
+            warnings,
+        });
+        return;
+    }
+    // Build the new file contents additively.
+    //
+    // Edge case: `parsed[REQUIRED_TABLE]` may be a TOML-implicit table
+    // created by a dotted-key header like `[sandbox_workspace_write.sub]`
+    // even when no literal `[sandbox_workspace_write]` header exists in the
+    // source text. In that case `insertIntoExistingTable` falls back to
+    // appending a fresh header, which would cause smol-toml to reject the
+    // result on the sanity-parse below (table redefinition). The sanity
+    // parse catches it and we surface a ConfigError — not pretty, but safe.
+    // If this becomes a real problem, switch to writing the dotted form
+    // `sandbox_workspace_write.network_access = true` at top-of-file.
+    let nextRaw;
+    const tableExists = parsed[REQUIRED_TABLE] !== undefined &&
+        typeof parsed[REQUIRED_TABLE] === "object" &&
+        !Array.isArray(parsed[REQUIRED_TABLE]);
+    if (tableExists) {
+        nextRaw = insertIntoExistingTable(raw, change.table, change.key, change.value);
+    }
+    else {
+        nextRaw = appendTomlTable(raw, change.table, change.key, change.value);
+    }
+    // Sanity-parse the new contents before committing.
+    try {
+        parseToml(nextRaw);
+    }
+    catch (err) {
+        agentError(`Generated config would not re-parse: ${err.message}`, "ConfigError", { error_domain: AGENT_ERROR_DOMAINS.CONFIG });
+        return;
+    }
+    if (dryRunMode) {
+        agentSuccess({
+            status: "WOULD_APPLY",
+            config_file: file,
+            applied: [change],
+            warnings,
+        });
+        return;
+    }
+    try {
+        writeAtomic(file, nextRaw);
+    }
+    catch (err) {
+        agentError(`Failed to write ${file}: ${err.message}`, "IOError", { error_domain: AGENT_ERROR_DOMAINS.IO });
+        return;
+    }
+    agentSuccess({
+        status: "APPLIED",
+        config_file: file,
+        applied: [change],
+        warnings,
+    });
+}
+//# sourceMappingURL=codex-config.js.map

package/dist/agent/commands/codex-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-config.js","sourceRoot":"","sources":["../../../src/agent/commands/codex-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE7E,sEAAsE;AACtE,EAAE;AACF,oEAAoE;AACpE,sEAAsE;AACtE,qEAAqE;AACrE,uEAAuE;AACvE,mEAAmE;AAEnE,MAAM,cAAc,GAAG,yBAAyB,CAAC;AACjD,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,cAAc,GAAG,IAAI,CAAC;AA4B5B,sEAAsE;AAEtE,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB;IACjD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,KAAa,EAAE,GAAW,EAAE,KAAa;IAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,GAAG,OAAO,GAAG,GAAG,IAAI,KAAK,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,KAAa,EACb,GAAW,EACX,KAAa;IAEb,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,eAAe,KAAK,CAAC,OAAO,CAAC,wBAAwB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACnH,yEAAyE;IACzE,2EAA2E;IAC3E,yDAAyD;IACzD,MAAM,cAAc,GAAG,gCAAgC,CAAC;IAExD,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,UAAU,GAAG,CAAC,CAAC;YACf,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,+DAA+D;QAC/D,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,QAAQ,GAAG,CAAC,CAAC;YACb,MAAM;QACR,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,OAAO,QAAQ,GAAG,UAAU,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtE,QAAQ,EAAE,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,MAA+B;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACrC,IACE,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAiC,CAAC,YAAY,CAAC,KAAK,cAAc,EACnE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,KAAK,EAAE,cAAc;QACrB,GAAG,EAAE,YAAY;QACjB,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,eAAe,CAAC,MAA+B;IACtD,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IACE,QAAQ;QACR,OAAO,QAAQ,KAAK,QAAQ;QAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvB,QAAoC,CAAC,WAAW,KAAK,KAAK,EAC3D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EACL,2IAA2I;SAC9I,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,OAAO,EACL,oHAAoH;SACvH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,4EAA4E;QAC5E,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,KAAK;YACb,YAAY,EAAE;gBACZ,KAAK,EAAE,cAAc;gBACrB,GAAG,EAAE,YAAY;gBACjB,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;aAC9B;YACD,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,kBAAkB,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,SAAS,CAAC,GAAG,CAA6B,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAG,GAAa,CAAC,OAAO;SACpC,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,qCAAqC;SACnD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC;QAClC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;IAE3C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CACR,kBAAkB,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EACnD,SAAS,EACT,EAAE,YAAY,EAAE,mBAAmB,CAAC,EAAE,EAAE,CACzC,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,SAAS,CAAC,GAAG,CAA6B,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,CACR,mBAAmB,IAAI,KAAM,GAAa,CAAC,OAAO,iDAAiD,EACnG,aAAa,EACb,EAAE,YAAY,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAC7C,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,UAAU,CACR,GAAG,IAAI,kDAAkD,EACzD,aAAa,EACb,EAAE,YAAY,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAC7C,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAEzC,uEAAuE;IACvE,gEAAgE;IAChE,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,UAAU,CACR,2FAA2F,EAC3F,aAAa,EACb,EAAE,YAAY,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAC7C,CAAC;YACF,OAAO;QACT,CAAC;QACD,YAAY,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,YAAY,CAAC;YACX,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,IAAI;YACjB,QAAQ;SACT,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,0CAA0C;IAC1C,EAAE;IACF,mEAAmE;IACnE,sEAAsE;IACtE,wEAAwE;IACxE,oEAAoE;IACpE,sEAAsE;IACtE,oEAAoE;IACpE,wEAAwE;IACxE,oEAAoE;IACpE,kEAAkE;IAClE,IAAI,OAAe,CAAC;IACpB,MAAM,WAAW,GACf,MAAM,CAAC,cAAc,CAAC,KAAK,SAAS;QACpC,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ;QAC1C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;IAEzC,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,GAAG,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,CACR,wCAAyC,GAAa,CAAC,OAAO,EAAE,EAChE,aAAa,EACb,EAAE,YAAY,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAC7C,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,YAAY,CAAC;YACX,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,QAAQ;SACT,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,CACR,mBAAmB,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EACpD,SAAS,EACT,EAAE,YAAY,EAAE,mBAAmB,CAAC,EAAE,EAAE,CACzC,CAAC;QACF,OAAO;IACT,CAAC;IAED,YAAY,CAAC;QACX,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,QAAQ;KACT,CAAC,CAAC;AACL,CAAC"}

package/dist/agent/commands/codex-hook.d.ts

@@ -0,0 +1,70 @@
+/**
+ * mthds-agent codex hook — Codex PostToolUse(apply_patch) hook runtime.
+ *
+ * Wired into ~/.codex/hooks.json by `mthds-agent codex install-hook`. Runs
+ * after every apply_patch tool call in a Codex session: parses the patch
+ * envelope from tool_input.command, finds touched .mthds files, and validates
+ * each one with plxt (lint + fmt). On lint or fmt failure it emits the Codex
+ * hook block protocol so the session sees the error.
+ *
+ * Replaces the bash script previously at ~/.codex/hooks/codex-validate-mthds.sh.
+ *
+ * Stdout protocol — Codex's hook contract, not the mthds agent JSON:
+ *   - empty / no output         → silent pass (no .mthds touched, or all clean)
+ *   - {"decision":"block",...}  → block the turn with the given reason
+ *
+ * Stage 3 (`mthds-agent validate bundle`) stays disabled until offline-mode
+ * validation lands in mthds-agent (Codex sandbox blocks the eager S3 fetch).
+ * Tracked as Phase 2D in mthds-plugins/TODOS.md.
+ */
+interface PlxtRunResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+/**
+ * Extract every distinct .mthds path mentioned in an apply_patch envelope.
+ *
+ * The envelope's relevant headers are:
+ *   *** Update File: <path>
+ *   *** Add File: <path>
+ *   *** Move to: <path>      (destination of a rename — we validate the dest)
+ *
+ * `Delete File:` and `Move from:` (the source of a rename) are deliberately
+ * skipped because the file no longer exists post-patch.
+ */
+export declare function parseMthdsFiles(command: string): string[];
+export declare function formatLintError(file: string, result: PlxtRunResult): string;
+export declare function formatFmtError(file: string, result: PlxtRunResult): string;
+export declare function buildBlockPayload(reason: string): string;
+/**
+ * Build the ordered list of candidate paths for `name` on PATH.
+ *
+ * Pure — no fs access. Exported for testability.
+ *
+ * On Windows we also try each PATHEXT extension (`plxt.EXE`, `plxt.CMD`, ...)
+ * and skip the bare name, because Windows requires an extension to consider
+ * a file executable. PATHEXT defaults to `.COM;.EXE;.BAT;.CMD` when unset.
+ */
+export declare function buildPathCandidates(name: string, pathEnv: string, platform: NodeJS.Platform, pathExt: string | undefined): string[];
+/**
+ * Cross-platform `command -v <name>`. We can't rely on PATH lookup
+ * inside spawnSync because we need to detect absence vs. spawn failure
+ * before we report "missing tool" to the user.
+ *
+ * `accessSync(X_OK)` enforces the executable bit on POSIX. On Windows
+ * X_OK is satisfied by any readable file, but the PATHEXT loop in
+ * buildPathCandidates already restricts us to extensions Windows treats
+ * as runnable.
+ */
+export declare function commandOnPath(name: string): boolean;
+export interface CodexHookDeps {
+    readStdin: () => string;
+    fileExists: (path: string) => boolean;
+    hasPlxt: () => boolean;
+    runPlxt: (args: string[]) => PlxtRunResult;
+    emit: (output: string) => void;
+}
+export declare function runCodexHook(deps: CodexHookDeps): Promise<void>;
+export declare function agentCodexHook(): Promise<void>;
+export {};