oh-my-harness 0.10.2 → 0.11.0

package/README.md

@@ -57,6 +57,7 @@ oh-my-harness init --preset nextjs fastapi
 
 # Short alias works too
 omh init "React app with TDD"
+omh init --preset android            # Android/Kotlin with Hilt, JUnit, Gradle
 omh catalog list
 omh test          # Dry-run verify your harness
 omh stats         # TUI analytics dashboard
@@ -69,22 +70,28 @@ omh stats         # TUI analytics dashboard
 └── config.json                        # AI provider config (global, not per-project)
 
 your-project/
-├── CLAUDE.md                          # TDD rules, coding standards
+├── CLAUDE.md                          # Claude Code instructions (TDD rules, standards)
+├── AGENTS.md                          # Codex CLI instructions (same managed sections)
 ├── harness.yaml                       # Your harness config (source of truth)
-└── .claude/
-    ├── settings.json                  # Hook configs, permissions
-    ├── hooks/
-    │   ├── catalog-branch-guard.sh    # Blocks commits on merged branches
-    │   ├── catalog-tdd-guard.sh       # Enforces test-first workflow
-    │   ├── catalog-commit-test-gate.sh # Tests must pass before commit
-    │   ├── catalog-path-guard.sh      # Protects build outputs
-    │   ├── catalog-command-guard.sh   # Blocks dangerous commands
-    │   ├── catalog-lint-on-save.sh    # Auto-lint on save
-    │   ├── catalog-auto-pr.sh         # Auto-create PR after push
-    │   └── .state/
-    │       ├── events.jsonl           # Hook event log (for analytics)
-    │       └── edit-history.json      # TDD guard state
-    └── oh-my-harness.json             # Active preset tracking
+├── .omh/                              # Single source of truth — hooks + state
+│   ├── hooks/
+│   │   ├── catalog-branch-guard.sh    # Blocks commits on merged branches
+│   │   ├── catalog-tdd-guard.sh       # Enforces test-first workflow
+│   │   ├── catalog-commit-test-gate.sh # Tests must pass before commit
+│   │   ├── catalog-path-guard.sh      # Protects build outputs
+│   │   ├── catalog-command-guard.sh   # Blocks dangerous commands
+│   │   ├── catalog-lint-on-save.sh    # Auto-lint on save
+│   │   └── catalog-auto-pr.sh         # Auto-create PR after push
+│   ├── state/                         # gitignored — log/runtime data
+│   │   ├── events.jsonl               # Unified hook event log (powers omh stats)
+│   │   └── tdd-edits.json             # TDD guard working state
+│   └── manifest.json                  # Generated-files manifest
+├── .claude/
+│   ├── settings.json                  # Claude permissions + hooks → .omh/hooks/*.sh
+│   └── oh-my-harness.json             # Active preset tracking
+└── .codex/
+    ├── config.toml                    # [features] codex_hooks = true
+    └── hooks.json                     # Codex hooks → .omh/hooks/*.sh (same scripts)
 ```
 
 ---
@@ -176,7 +183,7 @@ All enforcement is powered by **catalog blocks** — reusable, parameterized hoo
 | 🎨 `format-on-save` | auto-fix | Auto-format on file save |
 | 🧪 `test-on-save` | auto-fix | Auto-run tests on file save |
 | 🔀 `auto-pr` | automation | Auto-create PR after push |
-| 🧪 `tdd-guard` | quality | Blocks source edits unless test modified first (JS/TS/Python) |
+| 🧪 `tdd-guard` | quality | Blocks source edits unless test modified first (JS/TS/Python/Kotlin/Java) |
 | 🔒 `sql-guard` | security | Blocks dangerous SQL operations |
 | 🌳 `worktree-setup` | monorepo | Supports monorepo worktree patterns |
 | 🗜️ `compact-context` | maintenance | Re-injects context on session start |
@@ -396,8 +403,9 @@ oh-my-harness/
 - [x] Multi-provider AI support — Claude API, OpenAI, Gemini
 - [x] Interactive model selection per provider
 - [x] GitHub star prompt — first-time only
+- [x] Codex emitter — `AGENTS.md` + `.codex/hooks.json` + `.codex/config.toml`
+- [x] Unified `.omh/` layout — single source of truth for hooks & state across runtimes
 - [ ] Cursor (`.cursor/rules/`) emitter
-- [ ] Codex (`AGENTS.md`) emitter
 - [ ] GitHub Copilot emitter
 - [ ] Community preset registry
 - [ ] `omh modify "change X"` — NL config editing

package/dist/bin/oh-my-harness.js

@@ -1,4 +1,9 @@
 #!/usr/bin/env node
+import { createRequire } from "node:module";
 import { createCli } from "../cli/index.js";
+import { notifyIfUpdateAvailable } from "../cli/version-notifier.js";
+const require = createRequire(import.meta.url);
+const pkg = require("../../package.json");
+notifyIfUpdateAvailable({ name: pkg.name, version: pkg.version });
 const cli = createCli();
 cli.parse(process.argv);

package/dist/catalog/blocks/branch-guard.js

@@ -19,8 +19,9 @@ if echo "$COMMAND" | grep -qE "git commit|git push"; then
   [[ -z "$BRANCH" ]] && exit 0
   MAIN='{{mainBranch}}'
   if [[ "$BRANCH" == "$MAIN" ]] || [[ "$BRANCH" == "master" && "$MAIN" == "main" ]]; then
-    _log_event "block" "oh-my-harness: direct commits to $BRANCH are blocked. Create a feature branch."
-    echo "{\\"decision\\": \\"block\\", \\"reason\\": \\"oh-my-harness: direct commits to $BRANCH are blocked. Create a feature branch.\\"}"
+    REASON="oh-my-harness: direct commits to $BRANCH are blocked. Create a feature branch."
+    _log_event "block" "$REASON"
+    _emit_decision "block" "$REASON"
     exit 0
   fi
   MERGED=0
@@ -37,8 +38,9 @@ if echo "$COMMAND" | grep -qE "git commit|git push"; then
     fi
   fi
   if [[ "$MERGED" -eq 1 ]]; then
-    _log_event "block" "oh-my-harness: branch $BRANCH has already been merged to $MAIN. Create a new branch."
-    echo "{\\"decision\\": \\"block\\", \\"reason\\": \\"oh-my-harness: branch $BRANCH has already been merged to $MAIN. Create a new branch.\\"}"
+    REASON="oh-my-harness: branch $BRANCH has already been merged to $MAIN. Create a new branch."
+    _log_event "block" "$REASON"
+    _emit_decision "block" "$REASON"
     exit 0
   fi
 fi

package/dist/catalog/blocks/command-guard.js

@@ -25,8 +25,9 @@ NORMALIZED_CMD=$(printf '%s' "$COMMAND" | tr '[:space:]' ' ' | tr -s ' ')
 PATTERNS=({{#each patterns}}"{{{this}}}" {{/each}})
 for PATTERN in "\${PATTERNS[@]}"; do
   if echo "$NORMALIZED_CMD" | grep -qF -- "$PATTERN"; then
-    _log_event "block" "oh-my-harness: command matches blocked pattern: $PATTERN"
-    echo "{\\"decision\\": \\"block\\", \\"reason\\": \\"oh-my-harness: command matches blocked pattern: $PATTERN\\"}"
+    REASON="oh-my-harness: command matches blocked pattern: $PATTERN"
+    _log_event "block" "$REASON"
+    _emit_decision "block" "$REASON"
     exit 0
   fi
 done

package/dist/catalog/blocks/commit-test-gate.js

@@ -17,8 +17,9 @@ COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
 if echo "$COMMAND" | grep -qE "git commit"; then
   echo "oh-my-harness: Running {{{testCommand}}} before commit..." >&2
   if ! {{{testCommand}}} >&2 2>&1; then
-    _log_event "block" "oh-my-harness: pre-commit check failed"
-    echo "{\\"decision\\": \\"block\\", \\"reason\\": \\"oh-my-harness: pre-commit check failed\\"}"
+    REASON="oh-my-harness: pre-commit check failed"
+    _log_event "block" "$REASON"
+    _emit_decision "block" "$REASON"
     exit 0
   fi
 fi

package/dist/catalog/blocks/commit-typecheck-gate.js

@@ -17,8 +17,9 @@ COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
 if echo "$COMMAND" | grep -qE "git commit"; then
   echo "oh-my-harness: Running {{{typecheckCommand}}} before commit..." >&2
   if ! {{{typecheckCommand}}} >&2 2>&1; then
-    _log_event "block" "oh-my-harness: pre-commit check failed"
-    echo "{\\"decision\\": \\"block\\", \\"reason\\": \\"oh-my-harness: pre-commit check failed\\"}"
+    REASON="oh-my-harness: pre-commit check failed"
+    _log_event "block" "$REASON"
+    _emit_decision "block" "$REASON"
     exit 0
   fi
 fi

package/dist/catalog/blocks/config-audit.js

@@ -1,29 +1,20 @@
 export const configAudit = {
     id: "config-audit",
     name: "Config Audit",
-    description: "Logs configuration changes for audit trail",
+    description: "Logs configuration changes into the unified events.jsonl audit trail",
     category: "audit",
     event: "ConfigChange",
     matcher: "",
     canBlock: false,
-    params: [
-        {
-            name: "logFile",
-            type: "string",
-            description: "Path to the audit log file",
-            default: ".claude/hooks/.state/config-audit.log",
-            required: false,
-        },
-    ],
+    params: [],
     tags: ["audit", "config", "logging"],
     template: `#!/bin/bash
 set -euo pipefail
 INPUT=$(cat)
-LOG_FILE="{{{logFile}}}"
-mkdir -p "$(dirname "$LOG_FILE")" 2>/dev/null || true
 SOURCE=$(echo "$INPUT" | jq -r '.source // "unknown"' 2>/dev/null)
 FILE=$(echo "$INPUT" | jq -r '.file_path // "unknown"' 2>/dev/null)
-TS=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-echo "{\\"ts\\":\\"$TS\\",\\"source\\":\\"$SOURCE\\",\\"file\\":\\"$FILE\\"}" >> "$LOG_FILE"
+META=$(jq -nc --arg s "$SOURCE" --arg f "$FILE" '{source:$s,file:$f}' 2>/dev/null || true)
+[ -z "$META" ] && META='{"source":"unknown","file":"unknown"}'
+_log_event "allow" "" "$META"
 exit 0`,
 };

package/dist/catalog/blocks/lint-on-save.js

@@ -19,6 +19,13 @@ export const lintOnSave = {
             description: "Lint command to run (e.g. eslint --fix)",
             required: true,
         },
+        {
+            name: "scope",
+            type: "string",
+            description: "Lint scope: 'file' passes $FILE_PATH to command, 'module' runs command without file arg",
+            required: false,
+            default: "file",
+        },
     ],
     tags: ["lint", "auto-fix", "quality", "save"],
     template: `#!/bin/bash
@@ -29,8 +36,14 @@ FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .tool_input.path //
 PATTERN='{{{filePattern}}}'
 BASENAME=$(basename "$FILE_PATH")
 if [[ "$BASENAME" == $PATTERN ]]; then
-  echo "oh-my-harness: Running {{{command}}} on $FILE_PATH..." >&2
-  {{{command}}} "$FILE_PATH" >&2 2>&1 || true
+  SCOPE='{{{scope}}}'
+  if [[ "\${SCOPE:-file}" == "module" ]]; then
+    echo "oh-my-harness: Running {{{command}}} ..." >&2
+    {{{command}}} >&2 || true
+  else
+    echo "oh-my-harness: Running {{{command}}} on $FILE_PATH..." >&2
+    {{{command}}} "$FILE_PATH" >&2 || true
+  fi
 fi
 exit 0`,
 };

package/dist/catalog/blocks/lockfile-guard.js

@@ -25,8 +25,9 @@ BASENAME=$(basename "$FILE_PATH")
 LOCKFILES=({{#each lockfiles}}"{{{this}}}" {{/each}})
 for LOCKFILE in "\${LOCKFILES[@]}"; do
   if [[ "$BASENAME" == "$LOCKFILE" ]]; then
-    _log_event "block" "oh-my-harness: direct edits to lockfile $BASENAME are blocked. Use the package manager instead."
-    echo "{\\"decision\\": \\"block\\", \\"reason\\": \\"oh-my-harness: direct edits to lockfile $BASENAME are blocked. Use the package manager instead.\\"}"
+    REASON="oh-my-harness: direct edits to lockfile $BASENAME are blocked. Use the package manager instead."
+    _log_event "block" "$REASON"
+    _emit_decision "block" "$REASON"
     exit 0
   fi
 done

package/dist/catalog/blocks/path-guard.js

@@ -23,15 +23,17 @@ FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .tool_input.path //
 # Normalize path to prevent directory traversal attacks (e.g., ./foo/../dist/secret.js -> dist/secret.js)
 if command -v python3 >/dev/null 2>&1; then
   if ! NORMALIZED=$(python3 -c "import os,sys; print(os.path.normpath(sys.argv[1]))" "$FILE_PATH" 2>/dev/null); then
-    _log_event "block" "oh-my-harness: path normalization unavailable for non-canonical path"
-    echo "{\\"decision\\": \\\"block\\\", \\\"reason\\\": \\\"oh-my-harness: path normalization unavailable for non-canonical path\\\"}"
+    REASON="oh-my-harness: path normalization unavailable for non-canonical path"
+    _log_event "block" "$REASON"
+    _emit_decision "block" "$REASON"
     exit 0
   fi
 else
   case "$FILE_PATH" in
     /*|../*|*/../*|*/..|./*|*/./*|*/.)
-      _log_event "block" "oh-my-harness: path normalization unavailable for non-canonical path"
-      echo "{\\"decision\\": \\\"block\\\", \\\"reason\\\": \\\"oh-my-harness: path normalization unavailable for non-canonical path\\\"}"
+      REASON="oh-my-harness: path normalization unavailable for non-canonical path"
+      _log_event "block" "$REASON"
+      _emit_decision "block" "$REASON"
       exit 0
       ;;
   esac
@@ -41,21 +43,24 @@ BLOCKED_PATHS=({{#each blockedPaths}}"{{{this}}}" {{/each}})
 for BLOCKED in "\${BLOCKED_PATHS[@]}"; do
   if [[ "$BLOCKED" == */ ]]; then
     if [[ "$NORMALIZED" == "$BLOCKED"* || "$NORMALIZED" == *"/$BLOCKED"* ]]; then
-      _log_event "block" "oh-my-harness: file path matches blocked directory: $BLOCKED"
-      echo "{\\"decision\\": \\\"block\\\", \\\"reason\\\": \\\"oh-my-harness: file path matches blocked directory: $BLOCKED\\\"}"
+      REASON="oh-my-harness: file path matches blocked directory: $BLOCKED"
+      _log_event "block" "$REASON"
+      _emit_decision "block" "$REASON"
       exit 0
     fi
   elif [[ "$BLOCKED" == \\** ]]; then
     PATTERN="\${BLOCKED#\\*}"
     if [[ "$NORMALIZED" == *"$PATTERN" ]]; then
-      _log_event "block" "oh-my-harness: file path matches blocked pattern: $BLOCKED"
-      echo "{\\"decision\\": \\\"block\\\", \\\"reason\\\": \\\"oh-my-harness: file path matches blocked pattern: $BLOCKED\\\"}"
+      REASON="oh-my-harness: file path matches blocked pattern: $BLOCKED"
+      _log_event "block" "$REASON"
+      _emit_decision "block" "$REASON"
       exit 0
     fi
   else
     if [[ "$NORMALIZED" == "$BLOCKED" || "$NORMALIZED" == *"/$BLOCKED" ]]; then
-      _log_event "block" "oh-my-harness: file path matches blocked path: $BLOCKED"
-      echo "{\\"decision\\": \\\"block\\\", \\\"reason\\\": \\\"oh-my-harness: file path matches blocked path: $BLOCKED\\\"}"
+      REASON="oh-my-harness: file path matches blocked path: $BLOCKED"
+      _log_event "block" "$REASON"
+      _emit_decision "block" "$REASON"
       exit 0
     fi
   fi

package/dist/catalog/blocks/secret-file-guard.js

@@ -25,8 +25,9 @@ BASENAME=$(basename "$FILE_PATH")
 PATTERNS=({{#each patterns}}"{{{this}}}" {{/each}})
 for PATTERN in "\${PATTERNS[@]}"; do
   if [[ "$BASENAME" == $PATTERN ]]; then
-    _log_event "block" "oh-my-harness: file $BASENAME matches secret file pattern: $PATTERN"
-    echo "{\\"decision\\": \\"block\\", \\"reason\\": \\"oh-my-harness: file $BASENAME matches secret file pattern: $PATTERN\\"}"
+    REASON="oh-my-harness: file $BASENAME matches secret file pattern: $PATTERN"
+    _log_event "block" "$REASON"
+    _emit_decision "block" "$REASON"
     exit 0
   fi
 done

package/dist/catalog/blocks/sql-guard.js

@@ -26,7 +26,9 @@ PATTERNS=({{#each patterns}}"{{{this}}}" {{/each}})
 for PATTERN in "\${PATTERNS[@]}"; do
   PATTERN_LOWER=$(echo "$PATTERN" | tr '[:upper:]' '[:lower:]')
   if echo "$COMMAND_LOWER" | grep -qF -- "$PATTERN_LOWER"; then
-    echo "{\\"decision\\": \\"block\\", \\"reason\\": \\"oh-my-harness: SQL command matches blocked pattern: $PATTERN\\"}"
+    REASON="oh-my-harness: SQL command matches blocked pattern: $PATTERN"
+    _log_event "block" "$REASON"
+    _emit_decision "block" "$REASON"
     exit 0
   fi
 done

package/dist/catalog/blocks/tdd-guard.js

@@ -33,9 +33,9 @@ case "\$FILE_PATH" in
   *.json|*.yaml|*.yml|*.md|*.sh|*.css|*.html|*.svg|*.png|*.jpg) exit 0 ;;
 esac
 
-# edit-history 상태 파일
-STATE_DIR=".claude/hooks/.state"
-HISTORY_FILE="\$STATE_DIR/edit-history.json"
+# edit-history 상태 파일 (logger wrapper가 _OMH_STATE_DIR 를 export)
+STATE_DIR="\${_OMH_STATE_DIR:-.omh/state}"
+HISTORY_FILE="\$STATE_DIR/tdd-edits.json"
 mkdir -p "\$STATE_DIR" 2>/dev/null || true
 
 TEST_RE='{{{testPattern}}}'
@@ -62,19 +62,20 @@ fi
 
 # 대응 테스트 파일 확인 — 확장자 제거
 BASENAME=$(basename "\$FILE_PATH" | sed -E 's/\\.[^.]+$//')
-TEST_SUFFIX=".test."
 
+REASON="oh-my-harness: TDD — \${BASENAME} 에 대응하는 테스트 파일을 먼저 수정하세요"
 if [[ ! -f "\$HISTORY_FILE" ]]; then
-  _log_event "block" "oh-my-harness: TDD — \${BASENAME}\${TEST_SUFFIX}* 테스트 파일을 먼저 수정하세요"
-  echo "{\\"decision\\": \\"block\\", \\"reason\\": \\"oh-my-harness: TDD — \${BASENAME}\${TEST_SUFFIX}* 테스트 파일을 먼저 수정하세요\\"}"
+  _log_event "block" "\$REASON"
+  _emit_decision "block" "\$REASON"
   exit 0
 fi
 
 # edit-history에서 테스트 파일 검색 (tmp+mv로 원자적 쓰기, 크로스 플랫폼)
-if jq -e --arg b "\$BASENAME" '.edits[] | select(contains($b) and (contains(".test.") or contains(".spec.") or contains("test_")))' "\$HISTORY_FILE" >/dev/null 2>&1; then
+# Supports JS/TS (.test. / .spec. / test_) and JVM (Test suffix, e.g. IoViewTest.kt) conventions
+if jq -e --arg b "\$BASENAME" '.edits[] | select(contains($b) and (contains(".test.") or contains(".spec.") or contains("test_") or endswith("Test.kt") or endswith("Test.java")))' "\$HISTORY_FILE" >/dev/null 2>&1; then
   # 테스트 먼저 수정됨 → 매칭 테스트 기록 소비(제거) + 소스 기록 + 통과
   UPDATED=$(jq --arg b "\$BASENAME" --arg f "\$FILE_PATH" '
-    .edits |= [.[] | select((contains($b) and (contains(".test.") or contains(".spec.") or contains("test_"))) | not)]
+    .edits |= [.[] | select((contains($b) and (contains(".test.") or contains(".spec.") or contains("test_") or endswith("Test.kt") or endswith("Test.java"))) | not)]
     | .edits += [$f] | .edits |= unique
   ' "\$HISTORY_FILE" 2>/dev/null) || true
   if [[ -n "\$UPDATED" ]]; then
@@ -89,8 +90,8 @@ if [[ "\$DECISION" == "allow" ]]; then
   exit 0
 fi
 
-_log_event "block" "oh-my-harness: TDD — \${BASENAME}\${TEST_SUFFIX}* 테스트 파일을 먼저 수정하세요"
-echo "{\\"decision\\": \\"block\\", \\"reason\\": \\"oh-my-harness: TDD — \${BASENAME}\${TEST_SUFFIX}* 테스트 파일을 먼저 수정하세요\\"}"
+_log_event "block" "\$REASON"
+_emit_decision "block" "\$REASON"
 exit 0`,
     tags: ["tdd", "workflow", "quality"],
 };

package/dist/catalog/converter.js

@@ -1,4 +1,5 @@
 import { renderTemplate, validateParams, applyDefaults } from "./template-engine.js";
+import { OMH_HOOKS_DIR } from "../utils/paths.js";
 export async function convertHookEntries(entries, registry, _projectDir) {
     const hooksConfig = {};
     const scripts = new Map();
@@ -28,7 +29,7 @@ export async function convertHookEntries(entries, registry, _projectDir) {
         const count = blockInstanceCount.get(entry.block) ?? 0;
         blockInstanceCount.set(entry.block, count + 1);
         const scriptName = count === 0 ? `${entry.block}.sh` : `${entry.block}-${count}.sh`;
-        const scriptPath = `.claude/hooks/${scriptName}`;
+        const scriptPath = `${OMH_HOOKS_DIR}/${scriptName}`;
         scripts.set(scriptPath, scriptContent);
         const hookEntry = {
             type: "command",

package/dist/catalog/types.d.ts

@@ -85,7 +85,7 @@ export declare const BuildingBlockSchema: z.ZodObject<{
     template: string;
     name: string;
     tags: string[];
-    event: "PreToolUse" | "PostToolUse" | "SessionStart" | "Notification" | "ConfigChange" | "WorktreeCreate" | "PreCompact" | "PostCompact" | "Stop" | "SubagentStop" | "PreBash" | "PostBash" | "PreEdit" | "PostEdit" | "PreRead" | "PostRead" | "PreWrite" | "PostWrite" | "SessionEnd" | "PreToolResult" | "PostToolResult" | "UserPromptSubmit" | "WorktreeRemove";
+    event: "PreToolUse" | "PostToolUse" | "SessionStart" | "Notification" | "ConfigChange" | "WorktreeCreate" | "UserPromptSubmit" | "Stop" | "PreCompact" | "PostCompact" | "SubagentStop" | "PreBash" | "PostBash" | "PreEdit" | "PostEdit" | "PreRead" | "PostRead" | "PreWrite" | "PostWrite" | "SessionEnd" | "PreToolResult" | "PostToolResult" | "WorktreeRemove";
     category: "notification" | "custom" | "git" | "quality" | "security" | "formatting" | "auto-fix" | "automation" | "file-protection" | "audit";
     canBlock: boolean;
     matcher?: string | undefined;
@@ -102,7 +102,7 @@ export declare const BuildingBlockSchema: z.ZodObject<{
     template: string;
     name: string;
     tags: string[];
-    event: "PreToolUse" | "PostToolUse" | "SessionStart" | "Notification" | "ConfigChange" | "WorktreeCreate" | "PreCompact" | "PostCompact" | "Stop" | "SubagentStop" | "PreBash" | "PostBash" | "PreEdit" | "PostEdit" | "PreRead" | "PostRead" | "PreWrite" | "PostWrite" | "SessionEnd" | "PreToolResult" | "PostToolResult" | "UserPromptSubmit" | "WorktreeRemove";
+    event: "PreToolUse" | "PostToolUse" | "SessionStart" | "Notification" | "ConfigChange" | "WorktreeCreate" | "UserPromptSubmit" | "Stop" | "PreCompact" | "PostCompact" | "SubagentStop" | "PreBash" | "PostBash" | "PreEdit" | "PostEdit" | "PreRead" | "PostRead" | "PreWrite" | "PostWrite" | "SessionEnd" | "PreToolResult" | "PostToolResult" | "WorktreeRemove";
     category: "notification" | "custom" | "git" | "quality" | "security" | "formatting" | "auto-fix" | "automation" | "file-protection" | "audit";
     canBlock: boolean;
     matcher?: string | undefined;

package/dist/cli/command-checker.js

@@ -61,7 +61,7 @@ export async function checkHarnessCommands(hooks, projectDir) {
     const fs = await import("node:fs/promises");
     const path = await import("node:path");
     for (const hook of hooks) {
-        const scriptPath = hook.command.replace(/^bash\s+/, "").replace(/^"|"$/g, "");
+        const scriptPath = hook.command.replace(/^bash\s+/, "").replace(/^['"]|['"]$/g, "");
         const fullPath = path.join(projectDir, scriptPath);
         let content;
         try {

package/dist/cli/commands/doctor.d.ts

@@ -7,7 +7,9 @@ export interface DoctorResult {
     checks: {
         stateFile: boolean;
         claudeMd: boolean;
+        agentsMd: boolean;
         settingsJson: boolean;
+        codexConfig: boolean;
         hooksExecutable: boolean;
     };
     messages: string[];

package/dist/cli/commands/doctor.js

@@ -1,12 +1,16 @@
 import fs from "node:fs/promises";
 import path from "node:path";
+import { parse } from "smol-toml";
+import { OMH_HOOKS_DIR } from "../../utils/paths.js";
 export async function doctorCommand(options = {}) {
     const projectDir = options.projectDir ?? process.cwd();
     const messages = [];
     const checks = {
         stateFile: false,
         claudeMd: false,
+        agentsMd: false,
         settingsJson: false,
+        codexConfig: false,
         hooksExecutable: false,
     };
     // 1. Check .claude/oh-my-harness.json exists
@@ -48,8 +52,39 @@ export async function doctorCommand(options = {}) {
             messages.push("FAIL: .claude/settings.json is not valid JSON.");
         }
     }
-    // 4. Check hook scripts exist and are executable
-    const hooksDir = path.join(projectDir, ".claude", "hooks");
+    // 4. AGENTS.md (Codex)
+    const agentsMdPath = path.join(projectDir, "AGENTS.md");
+    try {
+        await fs.access(agentsMdPath);
+        checks.agentsMd = true;
+    }
+    catch {
+        messages.push("FAIL: AGENTS.md not found.");
+    }
+    // 5. .codex/hooks.json + .codex/config.toml — both must exist AND parse.
+    const codexHooksPath = path.join(projectDir, ".codex", "hooks.json");
+    const codexTomlPath = path.join(projectDir, ".codex", "config.toml");
+    try {
+        JSON.parse(await fs.readFile(codexHooksPath, "utf-8"));
+        const tomlRaw = await fs.readFile(codexTomlPath, "utf-8");
+        const parsed = parse(tomlRaw);
+        if (parsed.features?.codex_hooks !== true) {
+            messages.push("FAIL: .codex/config.toml missing [features] codex_hooks = true.");
+        }
+        else {
+            checks.codexConfig = true;
+        }
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            messages.push("FAIL: .codex/hooks.json or .codex/config.toml not found.");
+        }
+        else {
+            messages.push("FAIL: .codex/hooks.json or .codex/config.toml is invalid or unreadable.");
+        }
+    }
+    // 6. Check hook scripts exist and are executable
+    const hooksDir = path.join(projectDir, OMH_HOOKS_DIR);
     try {
         const files = await fs.readdir(hooksDir);
         const scripts = files.filter((f) => f.endsWith(".sh"));

package/dist/cli/commands/update.d.ts

@@ -0,0 +1,18 @@
+export interface UpdateOptions {
+    yes?: boolean;
+    dryRun?: boolean;
+}
+export interface UpdateDeps {
+    fetchLatest?: (name: string) => Promise<string | null>;
+    spawn?: (cmd: string, args: string[]) => {
+        status: number;
+    };
+    env?: NodeJS.ProcessEnv;
+}
+export interface UpdateResult {
+    exitCode: number;
+    ran: boolean;
+    command?: string;
+    latestVersion?: string;
+}
+export declare function updateCommand(currentVersion: string, options?: UpdateOptions, deps?: UpdateDeps): Promise<UpdateResult>;

package/dist/cli/commands/update.js

@@ -0,0 +1,78 @@
+import { spawnSync } from "node:child_process";
+import { detectInstaller } from "../installer-detect.js";
+import { fetchLatestVersion } from "../version-checker.js";
+const PKG_NAME = "oh-my-harness";
+function defaultSpawn(cmd, args) {
+    const result = spawnSync(cmd, args, { stdio: "inherit" });
+    return { status: result.status ?? 1 };
+}
+export async function updateCommand(currentVersion, options = {}, deps = {}) {
+    const fetchLatest = deps.fetchLatest ?? fetchLatestVersion;
+    const spawn = deps.spawn ?? defaultSpawn;
+    const env = deps.env ?? process.env;
+    console.log(`Current version: ${currentVersion}`);
+    console.log("Checking for updates…");
+    const latest = await fetchLatest(PKG_NAME);
+    if (!latest) {
+        console.log("Could not reach npm registry. Check your network and try again.");
+        return { exitCode: 1, ran: false };
+    }
+    if (latest === currentVersion) {
+        console.log(`Already up to date (${currentVersion}).`);
+        return { exitCode: 0, ran: false, latestVersion: latest };
+    }
+    console.log(`Update available: ${currentVersion} → ${latest}`);
+    const info = detectInstaller(env);
+    console.log(`Detected installer: ${info.installer}`);
+    if (info.notes) {
+        console.log(info.notes);
+    }
+    console.log(`Update command: ${info.updateCommand}`);
+    if (info.isEphemeral) {
+        console.log("Run the command above to install globally.");
+        return {
+            exitCode: 0,
+            ran: false,
+            command: info.updateCommand,
+            latestVersion: latest,
+        };
+    }
+    if (options.dryRun) {
+        return {
+            exitCode: 0,
+            ran: false,
+            command: info.updateCommand,
+            latestVersion: latest,
+        };
+    }
+    if (!options.yes && process.stdout.isTTY && process.stdin.isTTY) {
+        const { confirm } = await import("@inquirer/prompts");
+        const proceed = await confirm({
+            message: `Run "${info.updateCommand}"?`,
+            default: true,
+        });
+        if (!proceed) {
+            console.log("Cancelled.");
+            return {
+                exitCode: 0,
+                ran: false,
+                command: info.updateCommand,
+                latestVersion: latest,
+            };
+        }
+    }
+    const [cmd, ...args] = info.updateCommand.split(" ");
+    const { status } = spawn(cmd, args);
+    if (status === 0) {
+        console.log(`Updated to ${latest}.`);
+    }
+    else {
+        console.log(`Update failed with exit code ${status}. Try running the command manually.`);
+    }
+    return {
+        exitCode: status,
+        ran: true,
+        command: info.updateCommand,
+        latestVersion: latest,
+    };
+}

package/dist/cli/event-logger.d.ts

@@ -5,6 +5,7 @@ export interface HookEvent {
     decision: "block" | "allow" | "error";
     reason?: string;
     tool?: string;
+    meta?: Record<string, unknown>;
 }
 export declare function appendEvent(projectDir: string, hookEvent: HookEvent): Promise<void>;
 export declare function readEvents(projectDir: string): Promise<HookEvent[]>;

package/dist/cli/event-logger.js

@@ -1,15 +1,14 @@
 import fs from "node:fs/promises";
 import path from "node:path";
-const STATE_DIR = ".claude/hooks/.state";
-const EVENTS_FILE = "events.jsonl";
+import { OMH_STATE_DIR, OMH_EVENTS_FILE } from "../utils/paths.js";
 export async function appendEvent(projectDir, hookEvent) {
-    const stateDir = path.join(projectDir, STATE_DIR);
+    const stateDir = path.join(projectDir, OMH_STATE_DIR);
     await fs.mkdir(stateDir, { recursive: true });
-    const filePath = path.join(stateDir, EVENTS_FILE);
+    const filePath = path.join(stateDir, OMH_EVENTS_FILE);
     await fs.appendFile(filePath, JSON.stringify(hookEvent) + "\n", "utf-8");
 }
 export async function readEvents(projectDir) {
-    const filePath = path.join(projectDir, STATE_DIR, EVENTS_FILE);
+    const filePath = path.join(projectDir, OMH_STATE_DIR, OMH_EVENTS_FILE);
     let content;
     try {
         content = await fs.readFile(filePath, "utf-8");