open-multi-agent-kit 0.80.5 → 0.80.7

package/dist/migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA;;GAEG;AAeH;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAoDhD;AAmID;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CA+CnD;AA+ID;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB/E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG;IAC3C,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC9B,CAQA","sourcesContent":["/**\n * One-time migrations that run on startup.\n */\n\nimport chalk from \"chalk\";\nimport { chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync } from \"fs\";\nimport { dirname, join } from \"path\";\nimport { CONFIG_DIR_NAME, getAgentDir, getBinDir } from \"./config.ts\";\nimport { migrateKeybindingsConfig } from \"./core/keybindings.ts\";\nimport { isLegacyEnvVarNameConfigValue } from \"./core/resolve-config-value.ts\";\nimport { stripJsonComments } from \"./utils/json.ts\";\n\nconst MIGRATION_GUIDE_URL =\n\t\"https://github.com/dmae97/open-multi-agent-kit/blob/main/packages/coding-agent/CHANGELOG.md#extensions-migration\";\nconst EXTENSIONS_DOC_URL =\n\t\"https://github.com/dmae97/open-multi-agent-kit/blob/main/packages/coding-agent/docs/extensions.md\";\n\n/**\n * Migrate legacy oauth.json and settings.json apiKeys to auth.json.\n *\n * @returns Array of provider names that were migrated\n */\nexport function migrateAuthToAuthJson(): string[] {\n\tconst agentDir = getAgentDir();\n\tconst authPath = join(agentDir, \"auth.json\");\n\tconst oauthPath = join(agentDir, \"oauth.json\");\n\tconst settingsPath = join(agentDir, \"settings.json\");\n\n\t// Skip if auth.json already exists\n\tif (existsSync(authPath)) return [];\n\n\tconst migrated: Record<string, unknown> = {};\n\tconst providers: string[] = [];\n\n\t// Migrate oauth.json\n\tif (existsSync(oauthPath)) {\n\t\ttry {\n\t\t\tconst oauth = JSON.parse(readFileSync(oauthPath, \"utf-8\"));\n\t\t\tfor (const [provider, cred] of Object.entries(oauth)) {\n\t\t\t\tmigrated[provider] = { type: \"oauth\", ...(cred as object) };\n\t\t\t\tproviders.push(provider);\n\t\t\t}\n\t\t\trenameSync(oauthPath, `${oauthPath}.migrated`);\n\t\t} catch {\n\t\t\t// Skip on error\n\t\t}\n\t}\n\n\t// Migrate settings.json apiKeys\n\tif (existsSync(settingsPath)) {\n\t\ttry {\n\t\t\tconst content = readFileSync(settingsPath, \"utf-8\");\n\t\t\tconst settings = JSON.parse(content);\n\t\t\tif (settings.apiKeys && typeof settings.apiKeys === \"object\") {\n\t\t\t\tfor (const [provider, key] of Object.entries(settings.apiKeys)) {\n\t\t\t\t\tif (!migrated[provider] && typeof key === \"string\") {\n\t\t\t\t\t\tmigrated[provider] = { type: \"api_key\", key };\n\t\t\t\t\t\tproviders.push(provider);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tdelete settings.apiKeys;\n\t\t\t\twriteFileSync(settingsPath, JSON.stringify(settings, null, 2));\n\t\t\t}\n\t\t} catch {\n\t\t\t// Skip on error\n\t\t}\n\t}\n\n\tif (Object.keys(migrated).length > 0) {\n\t\tmkdirSync(dirname(authPath), { recursive: true });\n\t\twriteFileSync(authPath, JSON.stringify(migrated, null, 2), { mode: 0o600 });\n\t}\n\n\treturn providers;\n}\n\ninterface ConfigValueMigration {\n\tlocation: string;\n\tfrom: string;\n\tto: string;\n}\n\nfunction migrateLegacyEnvVarString(value: string): string | undefined {\n\treturn isLegacyEnvVarNameConfigValue(value) ? `$${value}` : undefined;\n}\n\nfunction migrateStringProperty(\n\trecord: Record<string, unknown>,\n\tkey: string,\n\tlocation: string,\n\tmigrations: ConfigValueMigration[],\n): boolean {\n\tconst value = record[key];\n\tif (typeof value !== \"string\") return false;\n\tconst migrated = migrateLegacyEnvVarString(value);\n\tif (migrated === undefined) return false;\n\trecord[key] = migrated;\n\tmigrations.push({ location, from: value, to: migrated });\n\treturn true;\n}\n\nfunction migrateHeadersConfig(headers: unknown, location: string, migrations: ConfigValueMigration[]): boolean {\n\tif (typeof headers !== \"object\" || headers === null || Array.isArray(headers)) return false;\n\tconst headerRecord = headers as Record<string, unknown>;\n\tlet migrated = false;\n\tfor (const [key, value] of Object.entries(headerRecord)) {\n\t\tif (typeof value !== \"string\") continue;\n\t\tconst migratedValue = migrateLegacyEnvVarString(value);\n\t\tif (migratedValue === undefined) continue;\n\t\theaderRecord[key] = migratedValue;\n\t\tmigrations.push({ location: `${location}[${JSON.stringify(key)}]`, from: value, to: migratedValue });\n\t\tmigrated = true;\n\t}\n\treturn migrated;\n}\n\nfunction migrateAuthJsonConfigValues(agentDir: string): ConfigValueMigration[] {\n\tconst authPath = join(agentDir, \"auth.json\");\n\tif (!existsSync(authPath)) return [];\n\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(authPath, \"utf-8\")) as unknown;\n\t\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) return [];\n\t\tconst authData = parsed as Record<string, unknown>;\n\n\t\tconst migrations: ConfigValueMigration[] = [];\n\t\tfor (const [provider, credential] of Object.entries(authData)) {\n\t\t\tif (typeof credential !== \"object\" || credential === null || Array.isArray(credential)) continue;\n\t\t\tconst credentialRecord = credential as Record<string, unknown>;\n\t\t\tif (credentialRecord.type !== \"api_key\") continue;\n\t\t\tmigrateStringProperty(credentialRecord, \"key\", `auth.json[${JSON.stringify(provider)}].key`, migrations);\n\t\t}\n\n\t\tif (migrations.length === 0) return [];\n\t\twriteFileSync(authPath, `${JSON.stringify(parsed, null, 2)}\\n`, \"utf-8\");\n\t\tchmodSync(authPath, 0o600);\n\t\treturn migrations;\n\t} catch {\n\t\treturn [];\n\t}\n}\n\nfunction migrateModelsJsonConfigValues(agentDir: string): ConfigValueMigration[] {\n\tconst modelsPath = join(agentDir, \"models.json\");\n\tif (!existsSync(modelsPath)) return [];\n\n\tconst parsed = JSON.parse(stripJsonComments(readFileSync(modelsPath, \"utf-8\"))) as unknown;\n\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) return [];\n\tconst modelsData = parsed as Record<string, unknown>;\n\tconst providers = modelsData.providers;\n\tif (typeof providers !== \"object\" || providers === null || Array.isArray(providers)) return [];\n\n\tconst migrations: ConfigValueMigration[] = [];\n\tfor (const [provider, providerConfig] of Object.entries(providers)) {\n\t\tif (typeof providerConfig !== \"object\" || providerConfig === null || Array.isArray(providerConfig)) continue;\n\t\tconst providerRecord = providerConfig as Record<string, unknown>;\n\t\tconst providerLocation = `models.json.providers[${JSON.stringify(provider)}]`;\n\t\tmigrateStringProperty(providerRecord, \"apiKey\", `${providerLocation}.apiKey`, migrations);\n\t\tmigrateHeadersConfig(providerRecord.headers, `${providerLocation}.headers`, migrations);\n\n\t\tif (Array.isArray(providerRecord.models)) {\n\t\t\tfor (let index = 0; index < providerRecord.models.length; index++) {\n\t\t\t\tconst modelConfig = providerRecord.models[index];\n\t\t\t\tif (typeof modelConfig !== \"object\" || modelConfig === null || Array.isArray(modelConfig)) continue;\n\t\t\t\tconst modelRecord = modelConfig as Record<string, unknown>;\n\t\t\t\tconst modelKey = typeof modelRecord.id === \"string\" ? JSON.stringify(modelRecord.id) : String(index);\n\t\t\t\tmigrateHeadersConfig(modelRecord.headers, `${providerLocation}.models[${modelKey}].headers`, migrations);\n\t\t\t}\n\t\t}\n\n\t\tconst modelOverrides = providerRecord.modelOverrides;\n\t\tif (typeof modelOverrides === \"object\" && modelOverrides !== null && !Array.isArray(modelOverrides)) {\n\t\t\tfor (const [modelId, modelOverride] of Object.entries(modelOverrides)) {\n\t\t\t\tif (typeof modelOverride !== \"object\" || modelOverride === null || Array.isArray(modelOverride)) continue;\n\t\t\t\tconst modelOverrideRecord = modelOverride as Record<string, unknown>;\n\t\t\t\tmigrateHeadersConfig(\n\t\t\t\t\tmodelOverrideRecord.headers,\n\t\t\t\t\t`${providerLocation}.modelOverrides[${JSON.stringify(modelId)}].headers`,\n\t\t\t\t\tmigrations,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\tif (migrations.length === 0) return [];\n\twriteFileSync(modelsPath, `${JSON.stringify(parsed, null, 2)}\\n`, \"utf-8\");\n\treturn migrations;\n}\n\nfunction migrateExplicitEnvVarConfigValues(): void {\n\tconst agentDir = getAgentDir();\n\tconst migrations = [...migrateAuthJsonConfigValues(agentDir), ...migrateModelsJsonConfigValues(agentDir)];\n\tif (migrations.length === 0) return;\n\n\tconst details = migrations.map((migration) => `  - ${migration.location}: ${migration.from} -> ${migration.to}`);\n\tconsole.log(\n\t\tchalk.yellow(\n\t\t\t[\n\t\t\t\t\"Warning: Migrated API key/header environment references to explicit $ENV_VAR syntax. Plain strings will be treated as literals.\",\n\t\t\t\t...details,\n\t\t\t].join(\"\\n\"),\n\t\t),\n\t);\n}\n\n/**\n * Migrate sessions from ~/.omk/agent/*.jsonl to proper session directories.\n *\n * Bug in v0.30.0: Sessions were saved to ~/.omk/agent/ instead of\n * ~/.omk/agent/sessions/<encoded-cwd>/. This migration moves them\n * to the correct location based on the cwd in their session header.\n *\n * See: https://github.com/dmae97/open-multi-agent-kit/issues/320\n */\nexport function migrateSessionsFromAgentRoot(): void {\n\tconst agentDir = getAgentDir();\n\n\t// Find all .jsonl files directly in agentDir (not in subdirectories)\n\tlet files: string[];\n\ttry {\n\t\tfiles = readdirSync(agentDir)\n\t\t\t.filter((f) => f.endsWith(\".jsonl\"))\n\t\t\t.map((f) => join(agentDir, f));\n\t} catch {\n\t\treturn;\n\t}\n\n\tif (files.length === 0) return;\n\n\tfor (const file of files) {\n\t\ttry {\n\t\t\t// Read first line to get session header\n\t\t\tconst content = readFileSync(file, \"utf8\");\n\t\t\tconst firstLine = content.split(\"\\n\")[0];\n\t\t\tif (!firstLine?.trim()) continue;\n\n\t\t\tconst header = JSON.parse(firstLine);\n\t\t\tif (header.type !== \"session\" || !header.cwd) continue;\n\n\t\t\tconst cwd: string = header.cwd;\n\n\t\t\t// Compute the correct session directory (same encoding as session-manager.ts)\n\t\t\tconst safePath = `--${cwd.replace(/^[/\\\\]/, \"\").replace(/[/\\\\:]/g, \"-\")}--`;\n\t\t\tconst correctDir = join(agentDir, \"sessions\", safePath);\n\n\t\t\t// Create directory if needed\n\t\t\tif (!existsSync(correctDir)) {\n\t\t\t\tmkdirSync(correctDir, { recursive: true });\n\t\t\t}\n\n\t\t\t// Move the file\n\t\t\tconst fileName = file.split(\"/\").pop() || file.split(\"\\\\\").pop();\n\t\t\tconst newPath = join(correctDir, fileName!);\n\n\t\t\tif (existsSync(newPath)) continue; // Skip if target exists\n\n\t\t\trenameSync(file, newPath);\n\t\t} catch {\n\t\t\t// Skip files that can't be migrated\n\t\t}\n\t}\n}\n\n/**\n * Migrate commands/ to prompts/ if needed.\n * Works for both regular directories and symlinks.\n */\nfunction migrateCommandsToPrompts(baseDir: string, label: string): boolean {\n\tconst commandsDir = join(baseDir, \"commands\");\n\tconst promptsDir = join(baseDir, \"prompts\");\n\n\tif (existsSync(commandsDir) && !existsSync(promptsDir)) {\n\t\ttry {\n\t\t\trenameSync(commandsDir, promptsDir);\n\t\t\tconsole.log(chalk.green(`Migrated ${label} commands/ → prompts/`));\n\t\t\treturn true;\n\t\t} catch (err) {\n\t\t\tconsole.log(\n\t\t\t\tchalk.yellow(\n\t\t\t\t\t`Warning: Could not migrate ${label} commands/ to prompts/: ${err instanceof Error ? err.message : err}`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t}\n\treturn false;\n}\n\nfunction migrateKeybindingsConfigFile(): void {\n\tconst configPath = join(getAgentDir(), \"keybindings.json\");\n\tif (!existsSync(configPath)) return;\n\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(configPath, \"utf-8\")) as unknown;\n\t\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n\t\t\treturn;\n\t\t}\n\t\tconst { config, migrated } = migrateKeybindingsConfig(parsed as Record<string, unknown>);\n\t\tif (!migrated) return;\n\t\twriteFileSync(configPath, `${JSON.stringify(config, null, 2)}\\n`, \"utf-8\");\n\t} catch {\n\t\t// Ignore malformed files during migration\n\t}\n}\n\n/**\n * Move fd/rg binaries from tools/ to bin/ if they exist.\n */\nfunction migrateToolsToBin(): void {\n\tconst agentDir = getAgentDir();\n\tconst toolsDir = join(agentDir, \"tools\");\n\tconst binDir = getBinDir();\n\n\tif (!existsSync(toolsDir)) return;\n\n\tconst binaries = [\"fd\", \"rg\", \"fd.exe\", \"rg.exe\"];\n\tlet movedAny = false;\n\n\tfor (const bin of binaries) {\n\t\tconst oldPath = join(toolsDir, bin);\n\t\tconst newPath = join(binDir, bin);\n\n\t\tif (existsSync(oldPath)) {\n\t\t\tif (!existsSync(binDir)) {\n\t\t\t\tmkdirSync(binDir, { recursive: true });\n\t\t\t}\n\t\t\tif (!existsSync(newPath)) {\n\t\t\t\ttry {\n\t\t\t\t\trenameSync(oldPath, newPath);\n\t\t\t\t\tmovedAny = true;\n\t\t\t\t} catch {\n\t\t\t\t\t// Ignore errors\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Target exists, just delete the old one\n\t\t\t\ttry {\n\t\t\t\t\trmSync?.(oldPath, { force: true });\n\t\t\t\t} catch {\n\t\t\t\t\t// Ignore\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tif (movedAny) {\n\t\tconsole.log(chalk.green(`Migrated managed binaries tools/ → bin/`));\n\t}\n}\n\n/**\n * Check for deprecated hooks/ and tools/ directories.\n * Note: tools/ may contain fd/rg binaries extracted by pi, so only warn if it has other files.\n */\nfunction checkDeprecatedExtensionDirs(baseDir: string, label: string): string[] {\n\tconst hooksDir = join(baseDir, \"hooks\");\n\tconst toolsDir = join(baseDir, \"tools\");\n\tconst warnings: string[] = [];\n\n\tif (existsSync(hooksDir)) {\n\t\twarnings.push(`${label} hooks/ directory found. Hooks have been renamed to extensions.`);\n\t}\n\n\tif (existsSync(toolsDir)) {\n\t\t// Check if tools/ contains anything other than fd/rg (which are auto-extracted binaries)\n\t\ttry {\n\t\t\tconst entries = readdirSync(toolsDir);\n\t\t\tconst customTools = entries.filter((e) => {\n\t\t\t\tconst lower = e.toLowerCase();\n\t\t\t\treturn (\n\t\t\t\t\tlower !== \"fd\" && lower !== \"rg\" && lower !== \"fd.exe\" && lower !== \"rg.exe\" && !e.startsWith(\".\") // Ignore .DS_Store and other hidden files\n\t\t\t\t);\n\t\t\t});\n\t\t\tif (customTools.length > 0) {\n\t\t\t\twarnings.push(\n\t\t\t\t\t`${label} tools/ directory contains custom tools. Custom tools have been merged into extensions.`,\n\t\t\t\t);\n\t\t\t}\n\t\t} catch {\n\t\t\t// Ignore read errors\n\t\t}\n\t}\n\n\treturn warnings;\n}\n\n/**\n * Run extension system migrations (commands→prompts) and collect warnings about deprecated directories.\n */\nfunction migrateExtensionSystem(cwd: string): string[] {\n\tconst agentDir = getAgentDir();\n\tconst projectDir = join(cwd, CONFIG_DIR_NAME);\n\n\t// Migrate commands/ to prompts/\n\tmigrateCommandsToPrompts(agentDir, \"Global\");\n\tmigrateCommandsToPrompts(projectDir, \"Project\");\n\n\t// Check for deprecated directories\n\tconst warnings = [\n\t\t...checkDeprecatedExtensionDirs(agentDir, \"Global\"),\n\t\t...checkDeprecatedExtensionDirs(projectDir, \"Project\"),\n\t];\n\n\treturn warnings;\n}\n\n/**\n * Print deprecation warnings and wait for keypress.\n */\nexport async function showDeprecationWarnings(warnings: string[]): Promise<void> {\n\tif (warnings.length === 0) return;\n\n\tfor (const warning of warnings) {\n\t\tconsole.log(chalk.yellow(`Warning: ${warning}`));\n\t}\n\tconsole.log(chalk.yellow(`\\nMove your extensions to the extensions/ directory.`));\n\tconsole.log(chalk.yellow(`Migration guide: ${MIGRATION_GUIDE_URL}`));\n\tconsole.log(chalk.yellow(`Documentation: ${EXTENSIONS_DOC_URL}`));\n\tconsole.log(chalk.dim(`\\nPress any key to continue...`));\n\n\tawait new Promise<void>((resolve) => {\n\t\tprocess.stdin.setRawMode?.(true);\n\t\tprocess.stdin.resume();\n\t\tprocess.stdin.once(\"data\", () => {\n\t\t\tprocess.stdin.setRawMode?.(false);\n\t\t\tprocess.stdin.pause();\n\t\t\tresolve();\n\t\t});\n\t});\n\tconsole.log();\n}\n\n/**\n * Run all migrations. Called once on startup.\n *\n * @returns Object with migration results and deprecation warnings\n */\nexport function runMigrations(cwd: string): {\n\tmigratedAuthProviders: string[];\n\tdeprecationWarnings: string[];\n} {\n\tconst migratedAuthProviders = migrateAuthToAuthJson();\n\tmigrateExplicitEnvVarConfigValues();\n\tmigrateSessionsFromAgentRoot();\n\tmigrateToolsToBin();\n\tmigrateKeybindingsConfigFile();\n\tconst deprecationWarnings = migrateExtensionSystem(cwd);\n\treturn { migratedAuthProviders, deprecationWarnings };\n}\n"]}
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA;;GAEG;AA6BH;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAoDhD;AAmID;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CA+CnD;AA+FD,MAAM,MAAM,6BAA6B,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAC;AAEhF,MAAM,WAAW,8BAA8B;IAC9C,IAAI,EAAE,6BAA6B,GAAG,0BAA0B,CAAC;IACjE,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,6BAA6B,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,EAAE,oBAAoB,GAAG,kBAAkB,CAAC;CAC7D;AAED,MAAM,WAAW,wBAAwB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,GAAG,UAAU,CAAC;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE;QACZ,WAAW,EAAE,OAAO,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;KACb,CAAC;CACF;AAED,MAAM,WAAW,sBAAsB;IACtC,WAAW,EAAE,8BAA8B,EAAE,CAAC;IAC9C,OAAO,EAAE,wBAAwB,EAAE,CAAC;CACpC;AAiPD,wBAAgB,kCAAkC,CAAC,GAAG,EAAE,MAAM,GAAG,8BAA8B,EAAE,CAIhG;AAiFD,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB,CA6ChF;AAED,wBAAgB,2BAA2B,CAC1C,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,sBAA0D,GAC9D,sBAAsB,CAiGxB;AA2DD;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB/E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG;IAC3C,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC9B,CAQA","sourcesContent":["/**\n * One-time migrations that run on startup.\n */\n\nimport { createHash } from \"node:crypto\";\nimport chalk from \"chalk\";\nimport {\n\tchmodSync,\n\texistsSync,\n\tlstatSync,\n\tmkdirSync,\n\treaddirSync,\n\treadFileSync,\n\trealpathSync,\n\trenameSync,\n\trmSync,\n\twriteFileSync,\n} from \"fs\";\nimport { basename, dirname, join, relative, resolve, sep } from \"path\";\nimport { CONFIG_DIR_NAME, getAgentDir, getBinDir } from \"./config.ts\";\nimport { recordHarnessControlEvent } from \"./core/harness-control-events.ts\";\nimport { migrateKeybindingsConfig } from \"./core/keybindings.ts\";\nimport { isLegacyEnvVarNameConfigValue } from \"./core/resolve-config-value.ts\";\nimport { runHarnessControlTransactionSync } from \"./core/transaction-coordinator.ts\";\nimport { stripJsonComments } from \"./utils/json.ts\";\n\nconst MIGRATION_GUIDE_URL =\n\t\"https://github.com/dmae97/open-multi-agent-kit/blob/main/packages/coding-agent/CHANGELOG.md#extensions-migration\";\nconst EXTENSIONS_DOC_URL =\n\t\"https://github.com/dmae97/open-multi-agent-kit/blob/main/packages/coding-agent/docs/extensions.md\";\n\n/**\n * Migrate legacy oauth.json and settings.json apiKeys to auth.json.\n *\n * @returns Array of provider names that were migrated\n */\nexport function migrateAuthToAuthJson(): string[] {\n\tconst agentDir = getAgentDir();\n\tconst authPath = join(agentDir, \"auth.json\");\n\tconst oauthPath = join(agentDir, \"oauth.json\");\n\tconst settingsPath = join(agentDir, \"settings.json\");\n\n\t// Skip if auth.json already exists\n\tif (existsSync(authPath)) return [];\n\n\tconst migrated: Record<string, unknown> = {};\n\tconst providers: string[] = [];\n\n\t// Migrate oauth.json\n\tif (existsSync(oauthPath)) {\n\t\ttry {\n\t\t\tconst oauth = JSON.parse(readFileSync(oauthPath, \"utf-8\"));\n\t\t\tfor (const [provider, cred] of Object.entries(oauth)) {\n\t\t\t\tmigrated[provider] = { type: \"oauth\", ...(cred as object) };\n\t\t\t\tproviders.push(provider);\n\t\t\t}\n\t\t\trenameSync(oauthPath, `${oauthPath}.migrated`);\n\t\t} catch {\n\t\t\t// Skip on error\n\t\t}\n\t}\n\n\t// Migrate settings.json apiKeys\n\tif (existsSync(settingsPath)) {\n\t\ttry {\n\t\t\tconst content = readFileSync(settingsPath, \"utf-8\");\n\t\t\tconst settings = JSON.parse(content);\n\t\t\tif (settings.apiKeys && typeof settings.apiKeys === \"object\") {\n\t\t\t\tfor (const [provider, key] of Object.entries(settings.apiKeys)) {\n\t\t\t\t\tif (!migrated[provider] && typeof key === \"string\") {\n\t\t\t\t\t\tmigrated[provider] = { type: \"api_key\", key };\n\t\t\t\t\t\tproviders.push(provider);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tdelete settings.apiKeys;\n\t\t\t\twriteFileSync(settingsPath, JSON.stringify(settings, null, 2));\n\t\t\t}\n\t\t} catch {\n\t\t\t// Skip on error\n\t\t}\n\t}\n\n\tif (Object.keys(migrated).length > 0) {\n\t\tmkdirSync(dirname(authPath), { recursive: true });\n\t\twriteFileSync(authPath, JSON.stringify(migrated, null, 2), { mode: 0o600 });\n\t}\n\n\treturn providers;\n}\n\ninterface ConfigValueMigration {\n\tlocation: string;\n\tfrom: string;\n\tto: string;\n}\n\nfunction migrateLegacyEnvVarString(value: string): string | undefined {\n\treturn isLegacyEnvVarNameConfigValue(value) ? `$${value}` : undefined;\n}\n\nfunction migrateStringProperty(\n\trecord: Record<string, unknown>,\n\tkey: string,\n\tlocation: string,\n\tmigrations: ConfigValueMigration[],\n): boolean {\n\tconst value = record[key];\n\tif (typeof value !== \"string\") return false;\n\tconst migrated = migrateLegacyEnvVarString(value);\n\tif (migrated === undefined) return false;\n\trecord[key] = migrated;\n\tmigrations.push({ location, from: value, to: migrated });\n\treturn true;\n}\n\nfunction migrateHeadersConfig(headers: unknown, location: string, migrations: ConfigValueMigration[]): boolean {\n\tif (typeof headers !== \"object\" || headers === null || Array.isArray(headers)) return false;\n\tconst headerRecord = headers as Record<string, unknown>;\n\tlet migrated = false;\n\tfor (const [key, value] of Object.entries(headerRecord)) {\n\t\tif (typeof value !== \"string\") continue;\n\t\tconst migratedValue = migrateLegacyEnvVarString(value);\n\t\tif (migratedValue === undefined) continue;\n\t\theaderRecord[key] = migratedValue;\n\t\tmigrations.push({ location: `${location}[${JSON.stringify(key)}]`, from: value, to: migratedValue });\n\t\tmigrated = true;\n\t}\n\treturn migrated;\n}\n\nfunction migrateAuthJsonConfigValues(agentDir: string): ConfigValueMigration[] {\n\tconst authPath = join(agentDir, \"auth.json\");\n\tif (!existsSync(authPath)) return [];\n\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(authPath, \"utf-8\")) as unknown;\n\t\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) return [];\n\t\tconst authData = parsed as Record<string, unknown>;\n\n\t\tconst migrations: ConfigValueMigration[] = [];\n\t\tfor (const [provider, credential] of Object.entries(authData)) {\n\t\t\tif (typeof credential !== \"object\" || credential === null || Array.isArray(credential)) continue;\n\t\t\tconst credentialRecord = credential as Record<string, unknown>;\n\t\t\tif (credentialRecord.type !== \"api_key\") continue;\n\t\t\tmigrateStringProperty(credentialRecord, \"key\", `auth.json[${JSON.stringify(provider)}].key`, migrations);\n\t\t}\n\n\t\tif (migrations.length === 0) return [];\n\t\twriteFileSync(authPath, `${JSON.stringify(parsed, null, 2)}\\n`, \"utf-8\");\n\t\tchmodSync(authPath, 0o600);\n\t\treturn migrations;\n\t} catch {\n\t\treturn [];\n\t}\n}\n\nfunction migrateModelsJsonConfigValues(agentDir: string): ConfigValueMigration[] {\n\tconst modelsPath = join(agentDir, \"models.json\");\n\tif (!existsSync(modelsPath)) return [];\n\n\tconst parsed = JSON.parse(stripJsonComments(readFileSync(modelsPath, \"utf-8\"))) as unknown;\n\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) return [];\n\tconst modelsData = parsed as Record<string, unknown>;\n\tconst providers = modelsData.providers;\n\tif (typeof providers !== \"object\" || providers === null || Array.isArray(providers)) return [];\n\n\tconst migrations: ConfigValueMigration[] = [];\n\tfor (const [provider, providerConfig] of Object.entries(providers)) {\n\t\tif (typeof providerConfig !== \"object\" || providerConfig === null || Array.isArray(providerConfig)) continue;\n\t\tconst providerRecord = providerConfig as Record<string, unknown>;\n\t\tconst providerLocation = `models.json.providers[${JSON.stringify(provider)}]`;\n\t\tmigrateStringProperty(providerRecord, \"apiKey\", `${providerLocation}.apiKey`, migrations);\n\t\tmigrateHeadersConfig(providerRecord.headers, `${providerLocation}.headers`, migrations);\n\n\t\tif (Array.isArray(providerRecord.models)) {\n\t\t\tfor (let index = 0; index < providerRecord.models.length; index++) {\n\t\t\t\tconst modelConfig = providerRecord.models[index];\n\t\t\t\tif (typeof modelConfig !== \"object\" || modelConfig === null || Array.isArray(modelConfig)) continue;\n\t\t\t\tconst modelRecord = modelConfig as Record<string, unknown>;\n\t\t\t\tconst modelKey = typeof modelRecord.id === \"string\" ? JSON.stringify(modelRecord.id) : String(index);\n\t\t\t\tmigrateHeadersConfig(modelRecord.headers, `${providerLocation}.models[${modelKey}].headers`, migrations);\n\t\t\t}\n\t\t}\n\n\t\tconst modelOverrides = providerRecord.modelOverrides;\n\t\tif (typeof modelOverrides === \"object\" && modelOverrides !== null && !Array.isArray(modelOverrides)) {\n\t\t\tfor (const [modelId, modelOverride] of Object.entries(modelOverrides)) {\n\t\t\t\tif (typeof modelOverride !== \"object\" || modelOverride === null || Array.isArray(modelOverride)) continue;\n\t\t\t\tconst modelOverrideRecord = modelOverride as Record<string, unknown>;\n\t\t\t\tmigrateHeadersConfig(\n\t\t\t\t\tmodelOverrideRecord.headers,\n\t\t\t\t\t`${providerLocation}.modelOverrides[${JSON.stringify(modelId)}].headers`,\n\t\t\t\t\tmigrations,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\tif (migrations.length === 0) return [];\n\twriteFileSync(modelsPath, `${JSON.stringify(parsed, null, 2)}\\n`, \"utf-8\");\n\treturn migrations;\n}\n\nfunction migrateExplicitEnvVarConfigValues(): void {\n\tconst agentDir = getAgentDir();\n\tconst migrations = [...migrateAuthJsonConfigValues(agentDir), ...migrateModelsJsonConfigValues(agentDir)];\n\tif (migrations.length === 0) return;\n\n\tconst details = migrations.map((migration) => `  - ${migration.location}: ${migration.from} -> ${migration.to}`);\n\tconsole.log(\n\t\tchalk.yellow(\n\t\t\t[\n\t\t\t\t\"Warning: Migrated API key/header environment references to explicit $ENV_VAR syntax. Plain strings will be treated as literals.\",\n\t\t\t\t...details,\n\t\t\t].join(\"\\n\"),\n\t\t),\n\t);\n}\n\n/**\n * Migrate sessions from ~/.omk/agent/*.jsonl to proper session directories.\n *\n * Bug in v0.30.0: Sessions were saved to ~/.omk/agent/ instead of\n * ~/.omk/agent/sessions/<encoded-cwd>/. This migration moves them\n * to the correct location based on the cwd in their session header.\n *\n * See: https://github.com/dmae97/open-multi-agent-kit/issues/320\n */\nexport function migrateSessionsFromAgentRoot(): void {\n\tconst agentDir = getAgentDir();\n\n\t// Find all .jsonl files directly in agentDir (not in subdirectories)\n\tlet files: string[];\n\ttry {\n\t\tfiles = readdirSync(agentDir)\n\t\t\t.filter((f) => f.endsWith(\".jsonl\"))\n\t\t\t.map((f) => join(agentDir, f));\n\t} catch {\n\t\treturn;\n\t}\n\n\tif (files.length === 0) return;\n\n\tfor (const file of files) {\n\t\ttry {\n\t\t\t// Read first line to get session header\n\t\t\tconst content = readFileSync(file, \"utf8\");\n\t\t\tconst firstLine = content.split(\"\\n\")[0];\n\t\t\tif (!firstLine?.trim()) continue;\n\n\t\t\tconst header = JSON.parse(firstLine);\n\t\t\tif (header.type !== \"session\" || !header.cwd) continue;\n\n\t\t\tconst cwd: string = header.cwd;\n\n\t\t\t// Compute the correct session directory (same encoding as session-manager.ts)\n\t\t\tconst safePath = `--${cwd.replace(/^[/\\\\]/, \"\").replace(/[/\\\\:]/g, \"-\")}--`;\n\t\t\tconst correctDir = join(agentDir, \"sessions\", safePath);\n\n\t\t\t// Create directory if needed\n\t\t\tif (!existsSync(correctDir)) {\n\t\t\t\tmkdirSync(correctDir, { recursive: true });\n\t\t\t}\n\n\t\t\t// Move the file\n\t\t\tconst fileName = file.split(\"/\").pop() || file.split(\"\\\\\").pop();\n\t\t\tconst newPath = join(correctDir, fileName!);\n\n\t\t\tif (existsSync(newPath)) continue; // Skip if target exists\n\n\t\t\trenameSync(file, newPath);\n\t\t} catch {\n\t\t\t// Skip files that can't be migrated\n\t\t}\n\t}\n}\n\n/**\n * Migrate commands/ to prompts/ if needed.\n * Works for both regular directories and symlinks.\n */\nfunction migrateCommandsToPrompts(baseDir: string, label: string): boolean {\n\tconst commandsDir = join(baseDir, \"commands\");\n\tconst promptsDir = join(baseDir, \"prompts\");\n\n\tif (existsSync(commandsDir) && !existsSync(promptsDir)) {\n\t\ttry {\n\t\t\trenameSync(commandsDir, promptsDir);\n\t\t\tconsole.log(chalk.green(`Migrated ${label} commands/ → prompts/`));\n\t\t\treturn true;\n\t\t} catch (err) {\n\t\t\tconsole.log(\n\t\t\t\tchalk.yellow(\n\t\t\t\t\t`Warning: Could not migrate ${label} commands/ to prompts/: ${err instanceof Error ? err.message : err}`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t}\n\treturn false;\n}\n\nfunction migrateKeybindingsConfigFile(): void {\n\tconst configPath = join(getAgentDir(), \"keybindings.json\");\n\tif (!existsSync(configPath)) return;\n\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(configPath, \"utf-8\")) as unknown;\n\t\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n\t\t\treturn;\n\t\t}\n\t\tconst { config, migrated } = migrateKeybindingsConfig(parsed as Record<string, unknown>);\n\t\tif (!migrated) return;\n\t\twriteFileSync(configPath, `${JSON.stringify(config, null, 2)}\\n`, \"utf-8\");\n\t} catch {\n\t\t// Ignore malformed files during migration\n\t}\n}\n\n/**\n * Move fd/rg binaries from tools/ to bin/ if they exist.\n */\nfunction migrateToolsToBin(): void {\n\tconst agentDir = getAgentDir();\n\tconst toolsDir = join(agentDir, \"tools\");\n\tconst binDir = getBinDir();\n\n\tif (!existsSync(toolsDir)) return;\n\n\tconst binaries = [\"fd\", \"rg\", \"fd.exe\", \"rg.exe\"];\n\tlet movedAny = false;\n\n\tfor (const bin of binaries) {\n\t\tconst oldPath = join(toolsDir, bin);\n\t\tconst newPath = join(binDir, bin);\n\n\t\tif (existsSync(oldPath)) {\n\t\t\tif (!existsSync(binDir)) {\n\t\t\t\tmkdirSync(binDir, { recursive: true });\n\t\t\t}\n\t\t\tif (!existsSync(newPath)) {\n\t\t\t\ttry {\n\t\t\t\t\trenameSync(oldPath, newPath);\n\t\t\t\t\tmovedAny = true;\n\t\t\t\t} catch {\n\t\t\t\t\t// Ignore errors\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Target exists, just delete the old one\n\t\t\t\ttry {\n\t\t\t\t\trmSync?.(oldPath, { force: true });\n\t\t\t\t} catch {\n\t\t\t\t\t// Ignore\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tif (movedAny) {\n\t\tconsole.log(chalk.green(`Migrated managed binaries tools/ → bin/`));\n\t}\n}\n\n/**\n * Check for deprecated hooks/ and tools/ directories.\n * Note: tools/ may contain fd/rg binaries extracted by OMK, so only warn if it has other files.\n */\nconst EXTENSION_SOURCE_EXTENSIONS = new Set([\".ts\", \".js\", \".mts\", \".cts\", \".mjs\", \".cjs\", \".tsx\", \".jsx\"]);\nconst LEGACY_MANIFEST_FIELDS = [\"hooks\", \"customTools\", \"extensions\"] as const;\nconst MAX_LEGACY_EXTENSION_SCAN_DEPTH = 8;\n\nexport type LegacyExtensionClassification = \"legacy\" | \"not-legacy\" | \"unknown\";\n\nexport interface ExtensionDeprecationDiagnostic {\n\tcode: \"LEGACY_EXTENSION_ENTRYPOINT\" | \"LEGACY_EXTENSION_UNKNOWN\";\n\tscope: \"global\" | \"project\";\n\tpath: string;\n\tclassification: LegacyExtensionClassification;\n\tconfidence: number;\n\tevidence: string[];\n\trecommendedAction: \"move-to-extensions\" | \"inspect-manifest\";\n}\n\nexport interface ExtensionMigrationAction {\n\taction: \"move\";\n\tscope: \"global\" | \"project\";\n\tfrom: string;\n\tto: string;\n\tstatus: \"ready\" | \"blocked\" | \"applied\" | \"rolled_back\" | \"in_doubt\";\n\treason: string;\n\tblocker?: string;\n\tsourceStatHash?: string;\n\tsourceContentHash?: string;\n\trecoveryJournalPath?: string;\n\tsourceStat?: {\n\t\tisDirectory: boolean;\n\t\tsize: number;\n\t\tmtimeMs: number;\n\t\tmode: number;\n\t};\n}\n\nexport interface ExtensionMigrationPlan {\n\tdiagnostics: ExtensionDeprecationDiagnostic[];\n\tactions: ExtensionMigrationAction[];\n}\n\nfunction extensionName(name: string): string {\n\tconst dotIndex = name.lastIndexOf(\".\");\n\treturn dotIndex >= 0 ? name.slice(dotIndex) : \"\";\n}\n\nfunction isExtensionSourceFile(name: string): boolean {\n\treturn EXTENSION_SOURCE_EXTENSIONS.has(extensionName(name));\n}\n\nfunction isObjectRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction manifestEntrypointReferencesSource(value: unknown): boolean {\n\tif (typeof value === \"string\") return isExtensionSourceFile(value);\n\tif (Array.isArray(value)) return value.some((entry) => manifestEntrypointReferencesSource(entry));\n\tif (isObjectRecord(value)) return Object.values(value).some((entry) => manifestEntrypointReferencesSource(entry));\n\treturn false;\n}\n\nfunction inspectLegacyExtensionManifest(\n\tdir: string,\n\tscope: \"global\" | \"project\",\n): ExtensionDeprecationDiagnostic | undefined {\n\tconst packageJsonPath = join(dir, \"package.json\");\n\tif (!existsSync(packageJsonPath)) return undefined;\n\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(packageJsonPath, \"utf-8\")) as unknown;\n\t\tif (!isObjectRecord(parsed)) return undefined;\n\t\tconst manifests = [parsed.pi, parsed.omk].filter(isObjectRecord);\n\t\tconst hasLegacyManifestArray = manifests.some((manifest) =>\n\t\t\tLEGACY_MANIFEST_FIELDS.some((field) => Array.isArray(manifest[field])),\n\t\t);\n\t\tconst hasManifestEntrypoint = [parsed.main, parsed.module, parsed.exports].some(\n\t\t\tmanifestEntrypointReferencesSource,\n\t\t);\n\t\tif (!hasLegacyManifestArray && !hasManifestEntrypoint) return undefined;\n\t\treturn {\n\t\t\tcode: \"LEGACY_EXTENSION_ENTRYPOINT\",\n\t\t\tscope,\n\t\t\tpath: packageJsonPath,\n\t\t\tclassification: \"legacy\",\n\t\t\tconfidence: hasLegacyManifestArray ? 0.96 : 0.82,\n\t\t\tevidence: [hasLegacyManifestArray ? \"manifest legacy array\" : \"manifest entrypoint\"],\n\t\t\trecommendedAction: \"move-to-extensions\",\n\t\t};\n\t} catch {\n\t\treturn {\n\t\t\tcode: \"LEGACY_EXTENSION_UNKNOWN\",\n\t\t\tscope,\n\t\t\tpath: packageJsonPath,\n\t\t\tclassification: \"unknown\",\n\t\t\tconfidence: 0.5,\n\t\t\tevidence: [\"package.json parse failed\"],\n\t\t\trecommendedAction: \"inspect-manifest\",\n\t\t};\n\t}\n}\n\nfunction isPathWithin(parent: string, child: string): boolean {\n\tconst resolvedParent = resolve(parent);\n\tconst resolvedChild = resolve(child);\n\treturn resolvedChild === resolvedParent || resolvedChild.startsWith(`${resolvedParent}${sep}`);\n}\n\nfunction addLegacySourceDiagnostic(\n\tdiagnostics: ExtensionDeprecationDiagnostic[],\n\tscope: \"global\" | \"project\",\n\tentryPath: string,\n\tevidence: string,\n): void {\n\tdiagnostics.push({\n\t\tcode: \"LEGACY_EXTENSION_ENTRYPOINT\",\n\t\tscope,\n\t\tpath: entryPath,\n\t\tclassification: \"legacy\",\n\t\tconfidence: 0.98,\n\t\tevidence: [evidence],\n\t\trecommendedAction: \"move-to-extensions\",\n\t});\n}\n\nfunction addUnknownExtensionDiagnostic(\n\tdiagnostics: ExtensionDeprecationDiagnostic[],\n\tscope: \"global\" | \"project\",\n\tentryPath: string,\n\tevidence: string,\n\tconfidence = 0.4,\n): void {\n\tdiagnostics.push({\n\t\tcode: \"LEGACY_EXTENSION_UNKNOWN\",\n\t\tscope,\n\t\tpath: entryPath,\n\t\tclassification: \"unknown\",\n\t\tconfidence,\n\t\tevidence: [evidence],\n\t\trecommendedAction: \"inspect-manifest\",\n\t});\n}\n\nfunction collectLegacyExtensionDiagnostics(\n\tentryPath: string,\n\thooksRealPath: string,\n\tscope: \"global\" | \"project\",\n\tdepth: number,\n\tvisitedRealPaths: Set<string>,\n\tdiagnostics: ExtensionDeprecationDiagnostic[],\n): void {\n\tif (depth > MAX_LEGACY_EXTENSION_SCAN_DEPTH) {\n\t\taddUnknownExtensionDiagnostic(diagnostics, scope, entryPath, \"maximum scan depth exceeded\");\n\t\treturn;\n\t}\n\n\tlet currentPath = entryPath;\n\tlet stats: ReturnType<typeof lstatSync>;\n\ttry {\n\t\tstats = lstatSync(currentPath);\n\t\tif (stats.isSymbolicLink()) {\n\t\t\tconst targetPath = realpathSync(currentPath);\n\t\t\tif (!isPathWithin(hooksRealPath, targetPath)) {\n\t\t\t\taddUnknownExtensionDiagnostic(\n\t\t\t\t\tdiagnostics,\n\t\t\t\t\tscope,\n\t\t\t\t\tcurrentPath,\n\t\t\t\t\t\"symlink target outside hooks directory\",\n\t\t\t\t\t0.6,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcurrentPath = targetPath;\n\t\t\tstats = lstatSync(currentPath);\n\t\t}\n\t} catch {\n\t\taddUnknownExtensionDiagnostic(diagnostics, scope, entryPath, \"path stat failed\");\n\t\treturn;\n\t}\n\n\tif (stats.isFile()) {\n\t\tif (isExtensionSourceFile(entryPath) || isExtensionSourceFile(currentPath)) {\n\t\t\taddLegacySourceDiagnostic(diagnostics, scope, entryPath, basename(entryPath));\n\t\t}\n\t\treturn;\n\t}\n\n\tif (!stats.isDirectory()) return;\n\n\tlet directoryRealPath: string;\n\ttry {\n\t\tdirectoryRealPath = realpathSync(currentPath);\n\t} catch {\n\t\taddUnknownExtensionDiagnostic(diagnostics, scope, entryPath, \"directory realpath failed\");\n\t\treturn;\n\t}\n\tif (visitedRealPaths.has(directoryRealPath)) return;\n\tvisitedRealPaths.add(directoryRealPath);\n\n\tconst manifestDiagnostic = inspectLegacyExtensionManifest(currentPath, scope);\n\tif (manifestDiagnostic) diagnostics.push({ ...manifestDiagnostic, path: join(entryPath, \"package.json\") });\n\n\tlet entries: Array<{ name: string }>;\n\ttry {\n\t\tentries = readdirSync(currentPath, { withFileTypes: true });\n\t} catch {\n\t\taddUnknownExtensionDiagnostic(diagnostics, scope, entryPath, \"directory read failed\");\n\t\treturn;\n\t}\n\n\tfor (const entry of entries) {\n\t\tif (entry.name.startsWith(\".\")) continue;\n\t\tcollectLegacyExtensionDiagnostics(\n\t\t\tjoin(entryPath, entry.name),\n\t\t\thooksRealPath,\n\t\t\tscope,\n\t\t\tdepth + 1,\n\t\t\tvisitedRealPaths,\n\t\t\tdiagnostics,\n\t\t);\n\t}\n}\n\nfunction getLegacyExtensionDiagnosticsForHooksDir(\n\thooksDir: string,\n\tscope: \"global\" | \"project\",\n): ExtensionDeprecationDiagnostic[] {\n\tif (!existsSync(hooksDir)) return [];\n\n\ttry {\n\t\tconst hooksRealPath = realpathSync(hooksDir);\n\t\tconst diagnostics: ExtensionDeprecationDiagnostic[] = [];\n\t\tconst visitedRealPaths = new Set<string>();\n\t\tfor (const entry of readdirSync(hooksDir, { withFileTypes: true })) {\n\t\t\tif (entry.name.startsWith(\".\")) continue;\n\t\t\tcollectLegacyExtensionDiagnostics(\n\t\t\t\tjoin(hooksDir, entry.name),\n\t\t\t\thooksRealPath,\n\t\t\t\tscope,\n\t\t\t\t1,\n\t\t\t\tvisitedRealPaths,\n\t\t\t\tdiagnostics,\n\t\t\t);\n\t\t}\n\t\treturn diagnostics;\n\t} catch {\n\t\treturn [\n\t\t\t{\n\t\t\t\tcode: \"LEGACY_EXTENSION_UNKNOWN\",\n\t\t\t\tscope,\n\t\t\t\tpath: hooksDir,\n\t\t\t\tclassification: \"unknown\",\n\t\t\t\tconfidence: 0.4,\n\t\t\t\tevidence: [\"directory read failed\"],\n\t\t\t\trecommendedAction: \"inspect-manifest\",\n\t\t\t},\n\t\t];\n\t}\n}\n\nfunction getExtensionDeprecationScanTargets(cwd: string): Array<{\n\tscope: \"global\" | \"project\";\n\thooksDir: string;\n\textensionsDir: string;\n}> {\n\tconst agentDir = getAgentDir();\n\tconst projectDir = join(cwd, CONFIG_DIR_NAME);\n\treturn [\n\t\t{\n\t\t\tscope: \"global\",\n\t\t\thooksDir: join(agentDir, \"hooks\"),\n\t\t\textensionsDir: join(agentDir, \"extensions\"),\n\t\t},\n\t\t{\n\t\t\tscope: \"project\",\n\t\t\thooksDir: join(projectDir, \"hooks\"),\n\t\t\textensionsDir: join(projectDir, \"extensions\"),\n\t\t},\n\t];\n}\n\nexport function getExtensionDeprecationDiagnostics(cwd: string): ExtensionDeprecationDiagnostic[] {\n\treturn getExtensionDeprecationScanTargets(cwd).flatMap((target) =>\n\t\tgetLegacyExtensionDiagnosticsForHooksDir(target.hooksDir, target.scope),\n\t);\n}\n\nfunction getMigrationSourcePath(diagnostic: ExtensionDeprecationDiagnostic): string {\n\tconst name = basename(diagnostic.path);\n\tif (name === \"package.json\" || /^index\\.[cm]?[tj]sx?$/.test(name)) {\n\t\treturn dirname(diagnostic.path);\n\t}\n\treturn diagnostic.path;\n}\n\nfunction createMigrationSourceStat(path: string): ExtensionMigrationAction[\"sourceStat\"] | undefined {\n\ttry {\n\t\tconst stats = lstatSync(path);\n\t\treturn {\n\t\t\tisDirectory: stats.isDirectory(),\n\t\t\tsize: stats.size,\n\t\t\tmtimeMs: stats.mtimeMs,\n\t\t\tmode: stats.mode,\n\t\t};\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction createMigrationSourceStatTree(path: string, depth = 0): unknown {\n\tconst sourceStat = createMigrationSourceStat(path);\n\tif (!sourceStat) return undefined;\n\tif (!sourceStat.isDirectory || depth >= MAX_LEGACY_EXTENSION_SCAN_DEPTH) {\n\t\treturn { name: basename(path), sourceStat };\n\t}\n\tconst children = readdirSync(path)\n\t\t.filter((entry) => !entry.startsWith(\".\"))\n\t\t.sort()\n\t\t.map((entry) => createMigrationSourceStatTree(join(path, entry), depth + 1));\n\treturn { name: basename(path), sourceStat, children };\n}\n\nfunction createMigrationSourceContentTree(path: string, depth = 0): unknown {\n\tconst sourceStat = createMigrationSourceStat(path);\n\tif (!sourceStat) return undefined;\n\tif (!sourceStat.isDirectory) {\n\t\ttry {\n\t\t\treturn {\n\t\t\t\tname: basename(path),\n\t\t\t\ttype: \"file\",\n\t\t\t\tsha256: createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\"),\n\t\t\t};\n\t\t} catch {\n\t\t\treturn undefined;\n\t\t}\n\t}\n\tif (depth >= MAX_LEGACY_EXTENSION_SCAN_DEPTH) return { name: basename(path), type: \"directory\", truncated: true };\n\tconst children = readdirSync(path)\n\t\t.filter((entry) => !entry.startsWith(\".\"))\n\t\t.sort()\n\t\t.map((entry) => createMigrationSourceContentTree(join(path, entry), depth + 1));\n\treturn { name: basename(path), type: \"directory\", children };\n}\n\nfunction hashMigrationSourceStat(path: string): string | undefined {\n\tconst tree = createMigrationSourceStatTree(path);\n\tif (!tree) return undefined;\n\treturn createHash(\"sha256\").update(JSON.stringify(tree)).digest(\"hex\");\n}\n\nfunction hashMigrationSourceContent(path: string): string | undefined {\n\tconst tree = createMigrationSourceContentTree(path);\n\tif (!tree) return undefined;\n\treturn createHash(\"sha256\").update(JSON.stringify(tree)).digest(\"hex\");\n}\n\nfunction addMigrationSourceStat(action: ExtensionMigrationAction): ExtensionMigrationAction {\n\tconst sourceStat = createMigrationSourceStat(action.from);\n\treturn {\n\t\t...action,\n\t\tsourceStat,\n\t\tsourceStatHash: hashMigrationSourceStat(action.from),\n\t\tsourceContentHash: hashMigrationSourceContent(action.from),\n\t};\n}\n\nexport function createExtensionMigrationPlan(cwd: string): ExtensionMigrationPlan {\n\tconst diagnostics = getExtensionDeprecationDiagnostics(cwd);\n\tconst targets = getExtensionDeprecationScanTargets(cwd);\n\tconst actions: ExtensionMigrationAction[] = [];\n\tconst seenSources = new Set<string>();\n\n\tfor (const diagnostic of diagnostics) {\n\t\tif (diagnostic.classification !== \"legacy\") continue;\n\t\tconst target = targets.find((candidate) => candidate.scope === diagnostic.scope);\n\t\tif (!target) continue;\n\t\tconst sourcePath = getMigrationSourcePath(diagnostic);\n\t\tif (!isPathWithin(target.hooksDir, sourcePath)) continue;\n\t\tif ([...seenSources].some((seenSource) => isPathWithin(seenSource, sourcePath))) continue;\n\t\tfor (const seenSource of [...seenSources]) {\n\t\t\tif (isPathWithin(sourcePath, seenSource)) {\n\t\t\t\tseenSources.delete(seenSource);\n\t\t\t\tconst actionIndex = actions.findIndex((action) => action.from === seenSource);\n\t\t\t\tif (actionIndex >= 0) actions.splice(actionIndex, 1);\n\t\t\t}\n\t\t}\n\t\tseenSources.add(sourcePath);\n\t\tconst relativeSource = relative(target.hooksDir, sourcePath);\n\t\tconst destinationPath = join(target.extensionsDir, relativeSource);\n\t\tconst destinationExists = existsSync(destinationPath);\n\t\tactions.push(\n\t\t\taddMigrationSourceStat({\n\t\t\t\taction: \"move\",\n\t\t\t\tscope: diagnostic.scope,\n\t\t\t\tfrom: sourcePath,\n\t\t\t\tto: destinationPath,\n\t\t\t\tstatus: destinationExists ? \"blocked\" : \"ready\",\n\t\t\t\treason: diagnostic.evidence.join(\", \"),\n\t\t\t\tblocker: destinationExists ? \"target already exists\" : undefined,\n\t\t\t}),\n\t\t);\n\t}\n\n\trecordHarnessControlEvent(\"extension.migration.plan\", \"completed\", {\n\t\tdiagnostics: diagnostics.length,\n\t\tlegacyDiagnostics: diagnostics.filter((diagnostic) => diagnostic.classification === \"legacy\").length,\n\t\tunknownDiagnostics: diagnostics.filter((diagnostic) => diagnostic.classification === \"unknown\").length,\n\t\tactions: actions.length,\n\t\tblockedActions: actions.filter((action) => action.status === \"blocked\").length,\n\t});\n\treturn { diagnostics, actions };\n}\n\nexport function applyExtensionMigrationPlan(\n\tcwd: string,\n\tplan: ExtensionMigrationPlan = createExtensionMigrationPlan(cwd),\n): ExtensionMigrationPlan {\n\tconst readyActions = plan.actions.filter((action) => action.status === \"ready\");\n\tconst preflightBlocked = plan.actions.filter((action) => action.status !== \"ready\");\n\tif (preflightBlocked.length > 0) {\n\t\trecordHarnessControlEvent(\"extension.migration.apply\", \"blocked\", {\n\t\t\tactions: plan.actions.length,\n\t\t\tblockedActions: preflightBlocked.length,\n\t\t\treason: \"preflight blocked actions present\",\n\t\t});\n\t\treturn plan;\n\t}\n\n\tconst appliedMoves: Array<{ from: string; to: string }> = [];\n\tlet appliedPlan: ExtensionMigrationPlan = plan;\n\tconst transaction = runHarnessControlTransactionSync({\n\t\tkind: \"extension.migration.apply\",\n\t\tdata: {\n\t\t\tactions: plan.actions.length,\n\t\t\treadyActions: readyActions.length,\n\t\t\tcwd,\n\t\t},\n\t\tbeforeState: plan.actions.map((action) => ({\n\t\t\tfrom: action.from,\n\t\t\tto: action.to,\n\t\t\tstatus: action.status,\n\t\t\tsourceStatHash: action.sourceStatHash,\n\t\t\tsourceContentHash: action.sourceContentHash,\n\t\t})),\n\t\tafterState: () =>\n\t\t\tappliedPlan.actions.map((action) => ({ from: action.from, to: action.to, status: action.status })),\n\t\tcommit: () => {\n\t\t\tfor (const action of readyActions) {\n\t\t\t\tif (!existsSync(action.from)) throw new Error(`source missing: ${action.from}`);\n\t\t\t\tif (existsSync(action.to)) throw new Error(`target already exists: ${action.to}`);\n\t\t\t\tconst currentContentHash = hashMigrationSourceContent(action.from);\n\t\t\t\tif (action.sourceContentHash && currentContentHash !== action.sourceContentHash) {\n\t\t\t\t\tthrow new Error(`source content changed before migration: ${action.from}`);\n\t\t\t\t}\n\t\t\t\tconst currentHash = hashMigrationSourceStat(action.from);\n\t\t\t\tif (action.sourceStatHash && currentHash !== action.sourceStatHash) {\n\t\t\t\t\tthrow new Error(`source changed before migration: ${action.from}`);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tfor (const action of readyActions) {\n\t\t\t\tmkdirSync(dirname(action.to), { recursive: true });\n\t\t\t\trenameSync(action.from, action.to);\n\t\t\t\tappliedMoves.push({ from: action.from, to: action.to });\n\t\t\t}\n\t\t\tappliedPlan = {\n\t\t\t\tdiagnostics: plan.diagnostics,\n\t\t\t\tactions: plan.actions.map((action) =>\n\t\t\t\t\taction.status === \"ready\" ? { ...action, status: \"applied\" as const } : action,\n\t\t\t\t),\n\t\t\t};\n\t\t\treturn appliedPlan;\n\t\t},\n\t\trollback: () => {\n\t\t\tfor (const move of [...appliedMoves].reverse()) {\n\t\t\t\tif (existsSync(move.to) && !existsSync(move.from)) {\n\t\t\t\t\tmkdirSync(dirname(move.from), { recursive: true });\n\t\t\t\t\trenameSync(move.to, move.from);\n\t\t\t\t}\n\t\t\t}\n\t\t\tappliedPlan = {\n\t\t\t\tdiagnostics: plan.diagnostics,\n\t\t\t\tactions: plan.actions.map((action) =>\n\t\t\t\t\taction.status === \"ready\" ? { ...action, status: \"rolled_back\" as const } : action,\n\t\t\t\t),\n\t\t\t};\n\t\t},\n\t});\n\n\tif (transaction.status === \"completed\") return appliedPlan;\n\tconst recoveryJournalPath =\n\t\ttransaction.status === \"in_doubt\" ? join(cwd, \".omk\", \"runs\", \"extension-migration-recovery.json\") : undefined;\n\tif (recoveryJournalPath) {\n\t\tmkdirSync(dirname(recoveryJournalPath), { recursive: true });\n\t\twriteFileSync(\n\t\t\trecoveryJournalPath,\n\t\t\t`${JSON.stringify({ status: \"in_doubt\", appliedMoves, error: String(transaction.error) }, null, 2)}\\n`,\n\t\t\t\"utf-8\",\n\t\t);\n\t}\n\treturn {\n\t\tdiagnostics: plan.diagnostics,\n\t\tactions: plan.actions.map((action) =>\n\t\t\taction.status === \"ready\"\n\t\t\t\t? {\n\t\t\t\t\t\t...action,\n\t\t\t\t\t\tstatus: transaction.status === \"in_doubt\" ? \"in_doubt\" : \"blocked\",\n\t\t\t\t\t\tblocker: transaction.error instanceof Error ? transaction.error.message : String(transaction.error),\n\t\t\t\t\t\trecoveryJournalPath,\n\t\t\t\t\t}\n\t\t\t\t: action,\n\t\t),\n\t};\n}\n\nfunction checkDeprecatedExtensionDirs(baseDir: string, label: string): string[] {\n\tconst hooksDir = join(baseDir, \"hooks\");\n\tconst toolsDir = join(baseDir, \"tools\");\n\tconst warnings: string[] = [];\n\tconst scope = label === \"Global\" ? \"global\" : \"project\";\n\n\tif (\n\t\tgetLegacyExtensionDiagnosticsForHooksDir(hooksDir, scope).some(\n\t\t\t(diagnostic) => diagnostic.classification === \"legacy\",\n\t\t)\n\t) {\n\t\twarnings.push(`${label} hooks/ directory found. Hooks have been renamed to extensions.`);\n\t}\n\n\tif (existsSync(toolsDir)) {\n\t\t// Check if tools/ contains anything other than fd/rg (which are auto-extracted binaries)\n\t\ttry {\n\t\t\tconst entries = readdirSync(toolsDir);\n\t\t\tconst customTools = entries.filter((e) => {\n\t\t\t\tconst lower = e.toLowerCase();\n\t\t\t\treturn (\n\t\t\t\t\tlower !== \"fd\" && lower !== \"rg\" && lower !== \"fd.exe\" && lower !== \"rg.exe\" && !e.startsWith(\".\") // Ignore .DS_Store and other hidden files\n\t\t\t\t);\n\t\t\t});\n\t\t\tif (customTools.length > 0) {\n\t\t\t\twarnings.push(\n\t\t\t\t\t`${label} tools/ directory contains custom tools. Custom tools have been merged into extensions.`,\n\t\t\t\t);\n\t\t\t}\n\t\t} catch {\n\t\t\t// Ignore read errors\n\t\t}\n\t}\n\n\treturn warnings;\n}\n\n/**\n * Run extension system migrations (commands→prompts) and collect warnings about deprecated directories.\n */\nfunction migrateExtensionSystem(cwd: string): string[] {\n\tconst agentDir = getAgentDir();\n\tconst projectDir = join(cwd, CONFIG_DIR_NAME);\n\n\t// Migrate commands/ to prompts/\n\tmigrateCommandsToPrompts(agentDir, \"Global\");\n\tmigrateCommandsToPrompts(projectDir, \"Project\");\n\n\t// Check for deprecated directories\n\tconst warnings = [\n\t\t...checkDeprecatedExtensionDirs(agentDir, \"Global\"),\n\t\t...checkDeprecatedExtensionDirs(projectDir, \"Project\"),\n\t];\n\n\treturn warnings;\n}\n\n/**\n * Print deprecation warnings and wait for keypress.\n */\nexport async function showDeprecationWarnings(warnings: string[]): Promise<void> {\n\tif (warnings.length === 0) return;\n\n\tfor (const warning of warnings) {\n\t\tconsole.log(chalk.yellow(`Warning: ${warning}`));\n\t}\n\tconsole.log(chalk.yellow(`\\nMove your extensions to the extensions/ directory.`));\n\tconsole.log(chalk.yellow(`Migration guide: ${MIGRATION_GUIDE_URL}`));\n\tconsole.log(chalk.yellow(`Documentation: ${EXTENSIONS_DOC_URL}`));\n\tconsole.log(chalk.dim(`\\nPress any key to continue...`));\n\n\tawait new Promise<void>((resolve) => {\n\t\tprocess.stdin.setRawMode?.(true);\n\t\tprocess.stdin.resume();\n\t\tprocess.stdin.once(\"data\", () => {\n\t\t\tprocess.stdin.setRawMode?.(false);\n\t\t\tprocess.stdin.pause();\n\t\t\tresolve();\n\t\t});\n\t});\n\tconsole.log();\n}\n\n/**\n * Run all migrations. Called once on startup.\n *\n * @returns Object with migration results and deprecation warnings\n */\nexport function runMigrations(cwd: string): {\n\tmigratedAuthProviders: string[];\n\tdeprecationWarnings: string[];\n} {\n\tconst migratedAuthProviders = migrateAuthToAuthJson();\n\tmigrateExplicitEnvVarConfigValues();\n\tmigrateSessionsFromAgentRoot();\n\tmigrateToolsToBin();\n\tmigrateKeybindingsConfigFile();\n\tconst deprecationWarnings = migrateExtensionSystem(cwd);\n\treturn { migratedAuthProviders, deprecationWarnings };\n}\n"]}

package/dist/migrations.js

@@ -1,12 +1,15 @@
 /**
  * One-time migrations that run on startup.
  */
+import { createHash } from "node:crypto";
 import chalk from "chalk";
-import { chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "fs";
-import { dirname, join } from "path";
+import { chmodSync, existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync, } from "fs";
+import { basename, dirname, join, relative, resolve, sep } from "path";
 import { CONFIG_DIR_NAME, getAgentDir, getBinDir } from "./config.js";
+import { recordHarnessControlEvent } from "./core/harness-control-events.js";
 import { migrateKeybindingsConfig } from "./core/keybindings.js";
 import { isLegacyEnvVarNameConfigValue } from "./core/resolve-config-value.js";
+import { runHarnessControlTransactionSync } from "./core/transaction-coordinator.js";
 import { stripJsonComments } from "./utils/json.js";
 const MIGRATION_GUIDE_URL = "https://github.com/dmae97/open-multi-agent-kit/blob/main/packages/coding-agent/CHANGELOG.md#extensions-migration";
 const EXTENSIONS_DOC_URL = "https://github.com/dmae97/open-multi-agent-kit/blob/main/packages/coding-agent/docs/extensions.md";
@@ -313,13 +316,416 @@ function migrateToolsToBin() {
 }
 /**
  * Check for deprecated hooks/ and tools/ directories.
- * Note: tools/ may contain fd/rg binaries extracted by pi, so only warn if it has other files.
+ * Note: tools/ may contain fd/rg binaries extracted by OMK, so only warn if it has other files.
  */
+const EXTENSION_SOURCE_EXTENSIONS = new Set([".ts", ".js", ".mts", ".cts", ".mjs", ".cjs", ".tsx", ".jsx"]);
+const LEGACY_MANIFEST_FIELDS = ["hooks", "customTools", "extensions"];
+const MAX_LEGACY_EXTENSION_SCAN_DEPTH = 8;
+function extensionName(name) {
+    const dotIndex = name.lastIndexOf(".");
+    return dotIndex >= 0 ? name.slice(dotIndex) : "";
+}
+function isExtensionSourceFile(name) {
+    return EXTENSION_SOURCE_EXTENSIONS.has(extensionName(name));
+}
+function isObjectRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function manifestEntrypointReferencesSource(value) {
+    if (typeof value === "string")
+        return isExtensionSourceFile(value);
+    if (Array.isArray(value))
+        return value.some((entry) => manifestEntrypointReferencesSource(entry));
+    if (isObjectRecord(value))
+        return Object.values(value).some((entry) => manifestEntrypointReferencesSource(entry));
+    return false;
+}
+function inspectLegacyExtensionManifest(dir, scope) {
+    const packageJsonPath = join(dir, "package.json");
+    if (!existsSync(packageJsonPath))
+        return undefined;
+    try {
+        const parsed = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+        if (!isObjectRecord(parsed))
+            return undefined;
+        const manifests = [parsed.pi, parsed.omk].filter(isObjectRecord);
+        const hasLegacyManifestArray = manifests.some((manifest) => LEGACY_MANIFEST_FIELDS.some((field) => Array.isArray(manifest[field])));
+        const hasManifestEntrypoint = [parsed.main, parsed.module, parsed.exports].some(manifestEntrypointReferencesSource);
+        if (!hasLegacyManifestArray && !hasManifestEntrypoint)
+            return undefined;
+        return {
+            code: "LEGACY_EXTENSION_ENTRYPOINT",
+            scope,
+            path: packageJsonPath,
+            classification: "legacy",
+            confidence: hasLegacyManifestArray ? 0.96 : 0.82,
+            evidence: [hasLegacyManifestArray ? "manifest legacy array" : "manifest entrypoint"],
+            recommendedAction: "move-to-extensions",
+        };
+    }
+    catch {
+        return {
+            code: "LEGACY_EXTENSION_UNKNOWN",
+            scope,
+            path: packageJsonPath,
+            classification: "unknown",
+            confidence: 0.5,
+            evidence: ["package.json parse failed"],
+            recommendedAction: "inspect-manifest",
+        };
+    }
+}
+function isPathWithin(parent, child) {
+    const resolvedParent = resolve(parent);
+    const resolvedChild = resolve(child);
+    return resolvedChild === resolvedParent || resolvedChild.startsWith(`${resolvedParent}${sep}`);
+}
+function addLegacySourceDiagnostic(diagnostics, scope, entryPath, evidence) {
+    diagnostics.push({
+        code: "LEGACY_EXTENSION_ENTRYPOINT",
+        scope,
+        path: entryPath,
+        classification: "legacy",
+        confidence: 0.98,
+        evidence: [evidence],
+        recommendedAction: "move-to-extensions",
+    });
+}
+function addUnknownExtensionDiagnostic(diagnostics, scope, entryPath, evidence, confidence = 0.4) {
+    diagnostics.push({
+        code: "LEGACY_EXTENSION_UNKNOWN",
+        scope,
+        path: entryPath,
+        classification: "unknown",
+        confidence,
+        evidence: [evidence],
+        recommendedAction: "inspect-manifest",
+    });
+}
+function collectLegacyExtensionDiagnostics(entryPath, hooksRealPath, scope, depth, visitedRealPaths, diagnostics) {
+    if (depth > MAX_LEGACY_EXTENSION_SCAN_DEPTH) {
+        addUnknownExtensionDiagnostic(diagnostics, scope, entryPath, "maximum scan depth exceeded");
+        return;
+    }
+    let currentPath = entryPath;
+    let stats;
+    try {
+        stats = lstatSync(currentPath);
+        if (stats.isSymbolicLink()) {
+            const targetPath = realpathSync(currentPath);
+            if (!isPathWithin(hooksRealPath, targetPath)) {
+                addUnknownExtensionDiagnostic(diagnostics, scope, currentPath, "symlink target outside hooks directory", 0.6);
+                return;
+            }
+            currentPath = targetPath;
+            stats = lstatSync(currentPath);
+        }
+    }
+    catch {
+        addUnknownExtensionDiagnostic(diagnostics, scope, entryPath, "path stat failed");
+        return;
+    }
+    if (stats.isFile()) {
+        if (isExtensionSourceFile(entryPath) || isExtensionSourceFile(currentPath)) {
+            addLegacySourceDiagnostic(diagnostics, scope, entryPath, basename(entryPath));
+        }
+        return;
+    }
+    if (!stats.isDirectory())
+        return;
+    let directoryRealPath;
+    try {
+        directoryRealPath = realpathSync(currentPath);
+    }
+    catch {
+        addUnknownExtensionDiagnostic(diagnostics, scope, entryPath, "directory realpath failed");
+        return;
+    }
+    if (visitedRealPaths.has(directoryRealPath))
+        return;
+    visitedRealPaths.add(directoryRealPath);
+    const manifestDiagnostic = inspectLegacyExtensionManifest(currentPath, scope);
+    if (manifestDiagnostic)
+        diagnostics.push({ ...manifestDiagnostic, path: join(entryPath, "package.json") });
+    let entries;
+    try {
+        entries = readdirSync(currentPath, { withFileTypes: true });
+    }
+    catch {
+        addUnknownExtensionDiagnostic(diagnostics, scope, entryPath, "directory read failed");
+        return;
+    }
+    for (const entry of entries) {
+        if (entry.name.startsWith("."))
+            continue;
+        collectLegacyExtensionDiagnostics(join(entryPath, entry.name), hooksRealPath, scope, depth + 1, visitedRealPaths, diagnostics);
+    }
+}
+function getLegacyExtensionDiagnosticsForHooksDir(hooksDir, scope) {
+    if (!existsSync(hooksDir))
+        return [];
+    try {
+        const hooksRealPath = realpathSync(hooksDir);
+        const diagnostics = [];
+        const visitedRealPaths = new Set();
+        for (const entry of readdirSync(hooksDir, { withFileTypes: true })) {
+            if (entry.name.startsWith("."))
+                continue;
+            collectLegacyExtensionDiagnostics(join(hooksDir, entry.name), hooksRealPath, scope, 1, visitedRealPaths, diagnostics);
+        }
+        return diagnostics;
+    }
+    catch {
+        return [
+            {
+                code: "LEGACY_EXTENSION_UNKNOWN",
+                scope,
+                path: hooksDir,
+                classification: "unknown",
+                confidence: 0.4,
+                evidence: ["directory read failed"],
+                recommendedAction: "inspect-manifest",
+            },
+        ];
+    }
+}
+function getExtensionDeprecationScanTargets(cwd) {
+    const agentDir = getAgentDir();
+    const projectDir = join(cwd, CONFIG_DIR_NAME);
+    return [
+        {
+            scope: "global",
+            hooksDir: join(agentDir, "hooks"),
+            extensionsDir: join(agentDir, "extensions"),
+        },
+        {
+            scope: "project",
+            hooksDir: join(projectDir, "hooks"),
+            extensionsDir: join(projectDir, "extensions"),
+        },
+    ];
+}
+export function getExtensionDeprecationDiagnostics(cwd) {
+    return getExtensionDeprecationScanTargets(cwd).flatMap((target) => getLegacyExtensionDiagnosticsForHooksDir(target.hooksDir, target.scope));
+}
+function getMigrationSourcePath(diagnostic) {
+    const name = basename(diagnostic.path);
+    if (name === "package.json" || /^index\.[cm]?[tj]sx?$/.test(name)) {
+        return dirname(diagnostic.path);
+    }
+    return diagnostic.path;
+}
+function createMigrationSourceStat(path) {
+    try {
+        const stats = lstatSync(path);
+        return {
+            isDirectory: stats.isDirectory(),
+            size: stats.size,
+            mtimeMs: stats.mtimeMs,
+            mode: stats.mode,
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+function createMigrationSourceStatTree(path, depth = 0) {
+    const sourceStat = createMigrationSourceStat(path);
+    if (!sourceStat)
+        return undefined;
+    if (!sourceStat.isDirectory || depth >= MAX_LEGACY_EXTENSION_SCAN_DEPTH) {
+        return { name: basename(path), sourceStat };
+    }
+    const children = readdirSync(path)
+        .filter((entry) => !entry.startsWith("."))
+        .sort()
+        .map((entry) => createMigrationSourceStatTree(join(path, entry), depth + 1));
+    return { name: basename(path), sourceStat, children };
+}
+function createMigrationSourceContentTree(path, depth = 0) {
+    const sourceStat = createMigrationSourceStat(path);
+    if (!sourceStat)
+        return undefined;
+    if (!sourceStat.isDirectory) {
+        try {
+            return {
+                name: basename(path),
+                type: "file",
+                sha256: createHash("sha256").update(readFileSync(path)).digest("hex"),
+            };
+        }
+        catch {
+            return undefined;
+        }
+    }
+    if (depth >= MAX_LEGACY_EXTENSION_SCAN_DEPTH)
+        return { name: basename(path), type: "directory", truncated: true };
+    const children = readdirSync(path)
+        .filter((entry) => !entry.startsWith("."))
+        .sort()
+        .map((entry) => createMigrationSourceContentTree(join(path, entry), depth + 1));
+    return { name: basename(path), type: "directory", children };
+}
+function hashMigrationSourceStat(path) {
+    const tree = createMigrationSourceStatTree(path);
+    if (!tree)
+        return undefined;
+    return createHash("sha256").update(JSON.stringify(tree)).digest("hex");
+}
+function hashMigrationSourceContent(path) {
+    const tree = createMigrationSourceContentTree(path);
+    if (!tree)
+        return undefined;
+    return createHash("sha256").update(JSON.stringify(tree)).digest("hex");
+}
+function addMigrationSourceStat(action) {
+    const sourceStat = createMigrationSourceStat(action.from);
+    return {
+        ...action,
+        sourceStat,
+        sourceStatHash: hashMigrationSourceStat(action.from),
+        sourceContentHash: hashMigrationSourceContent(action.from),
+    };
+}
+export function createExtensionMigrationPlan(cwd) {
+    const diagnostics = getExtensionDeprecationDiagnostics(cwd);
+    const targets = getExtensionDeprecationScanTargets(cwd);
+    const actions = [];
+    const seenSources = new Set();
+    for (const diagnostic of diagnostics) {
+        if (diagnostic.classification !== "legacy")
+            continue;
+        const target = targets.find((candidate) => candidate.scope === diagnostic.scope);
+        if (!target)
+            continue;
+        const sourcePath = getMigrationSourcePath(diagnostic);
+        if (!isPathWithin(target.hooksDir, sourcePath))
+            continue;
+        if ([...seenSources].some((seenSource) => isPathWithin(seenSource, sourcePath)))
+            continue;
+        for (const seenSource of [...seenSources]) {
+            if (isPathWithin(sourcePath, seenSource)) {
+                seenSources.delete(seenSource);
+                const actionIndex = actions.findIndex((action) => action.from === seenSource);
+                if (actionIndex >= 0)
+                    actions.splice(actionIndex, 1);
+            }
+        }
+        seenSources.add(sourcePath);
+        const relativeSource = relative(target.hooksDir, sourcePath);
+        const destinationPath = join(target.extensionsDir, relativeSource);
+        const destinationExists = existsSync(destinationPath);
+        actions.push(addMigrationSourceStat({
+            action: "move",
+            scope: diagnostic.scope,
+            from: sourcePath,
+            to: destinationPath,
+            status: destinationExists ? "blocked" : "ready",
+            reason: diagnostic.evidence.join(", "),
+            blocker: destinationExists ? "target already exists" : undefined,
+        }));
+    }
+    recordHarnessControlEvent("extension.migration.plan", "completed", {
+        diagnostics: diagnostics.length,
+        legacyDiagnostics: diagnostics.filter((diagnostic) => diagnostic.classification === "legacy").length,
+        unknownDiagnostics: diagnostics.filter((diagnostic) => diagnostic.classification === "unknown").length,
+        actions: actions.length,
+        blockedActions: actions.filter((action) => action.status === "blocked").length,
+    });
+    return { diagnostics, actions };
+}
+export function applyExtensionMigrationPlan(cwd, plan = createExtensionMigrationPlan(cwd)) {
+    const readyActions = plan.actions.filter((action) => action.status === "ready");
+    const preflightBlocked = plan.actions.filter((action) => action.status !== "ready");
+    if (preflightBlocked.length > 0) {
+        recordHarnessControlEvent("extension.migration.apply", "blocked", {
+            actions: plan.actions.length,
+            blockedActions: preflightBlocked.length,
+            reason: "preflight blocked actions present",
+        });
+        return plan;
+    }
+    const appliedMoves = [];
+    let appliedPlan = plan;
+    const transaction = runHarnessControlTransactionSync({
+        kind: "extension.migration.apply",
+        data: {
+            actions: plan.actions.length,
+            readyActions: readyActions.length,
+            cwd,
+        },
+        beforeState: plan.actions.map((action) => ({
+            from: action.from,
+            to: action.to,
+            status: action.status,
+            sourceStatHash: action.sourceStatHash,
+            sourceContentHash: action.sourceContentHash,
+        })),
+        afterState: () => appliedPlan.actions.map((action) => ({ from: action.from, to: action.to, status: action.status })),
+        commit: () => {
+            for (const action of readyActions) {
+                if (!existsSync(action.from))
+                    throw new Error(`source missing: ${action.from}`);
+                if (existsSync(action.to))
+                    throw new Error(`target already exists: ${action.to}`);
+                const currentContentHash = hashMigrationSourceContent(action.from);
+                if (action.sourceContentHash && currentContentHash !== action.sourceContentHash) {
+                    throw new Error(`source content changed before migration: ${action.from}`);
+                }
+                const currentHash = hashMigrationSourceStat(action.from);
+                if (action.sourceStatHash && currentHash !== action.sourceStatHash) {
+                    throw new Error(`source changed before migration: ${action.from}`);
+                }
+            }
+            for (const action of readyActions) {
+                mkdirSync(dirname(action.to), { recursive: true });
+                renameSync(action.from, action.to);
+                appliedMoves.push({ from: action.from, to: action.to });
+            }
+            appliedPlan = {
+                diagnostics: plan.diagnostics,
+                actions: plan.actions.map((action) => action.status === "ready" ? { ...action, status: "applied" } : action),
+            };
+            return appliedPlan;
+        },
+        rollback: () => {
+            for (const move of [...appliedMoves].reverse()) {
+                if (existsSync(move.to) && !existsSync(move.from)) {
+                    mkdirSync(dirname(move.from), { recursive: true });
+                    renameSync(move.to, move.from);
+                }
+            }
+            appliedPlan = {
+                diagnostics: plan.diagnostics,
+                actions: plan.actions.map((action) => action.status === "ready" ? { ...action, status: "rolled_back" } : action),
+            };
+        },
+    });
+    if (transaction.status === "completed")
+        return appliedPlan;
+    const recoveryJournalPath = transaction.status === "in_doubt" ? join(cwd, ".omk", "runs", "extension-migration-recovery.json") : undefined;
+    if (recoveryJournalPath) {
+        mkdirSync(dirname(recoveryJournalPath), { recursive: true });
+        writeFileSync(recoveryJournalPath, `${JSON.stringify({ status: "in_doubt", appliedMoves, error: String(transaction.error) }, null, 2)}\n`, "utf-8");
+    }
+    return {
+        diagnostics: plan.diagnostics,
+        actions: plan.actions.map((action) => action.status === "ready"
+            ? {
+                ...action,
+                status: transaction.status === "in_doubt" ? "in_doubt" : "blocked",
+                blocker: transaction.error instanceof Error ? transaction.error.message : String(transaction.error),
+                recoveryJournalPath,
+            }
+            : action),
+    };
+}
 function checkDeprecatedExtensionDirs(baseDir, label) {
     const hooksDir = join(baseDir, "hooks");
     const toolsDir = join(baseDir, "tools");
     const warnings = [];
-    if (existsSync(hooksDir)) {
+    const scope = label === "Global" ? "global" : "project";
+    if (getLegacyExtensionDiagnosticsForHooksDir(hooksDir, scope).some((diagnostic) => diagnostic.classification === "legacy")) {
         warnings.push(`${label} hooks/ directory found. Hooks have been renamed to extensions.`);
     }
     if (existsSync(toolsDir)) {