projecta-rrr 1.23.1 → 1.23.4

package/CHANGELOG.md

@@ -4,6 +4,23 @@ All notable changes to RRR will be documented in this file.
 
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.23.4] - 2026-04-20
+
+### Fixed
+- **Codex hosted MCP launcher** — installer now writes a Codex-specific bearer env file and registers `bearer_token_env_var` in `~/.codex/config.toml` so the hosted RRR setup works with the new `scripts/codex-rrr.sh` launcher.
+- **Codex launch helper** — added `npm run codex:rrr` and docs for starting Codex with the hosted bearer loaded from `~/.config/projecta-rrr/rrr-hosted.env`.
+
+## [1.23.3] - 2026-04-20
+
+### Fixed
+- **Codex agent config self-healing** — installer now rewrites `~/.codex/agents/*.toml` from the repo source and prunes stale generated files so legacy Codex-only fields cannot survive across installs.
+
+## [1.23.2] - 2026-04-20
+
+### Fixed
+- **Codex agent TOML `developer_instructions`** — Codex 0.122.0 requires this field; generator now extracts the first 3000 chars of each agent's markdown body as the system prompt using TOML literal multi-line strings (no escaping needed).
+- **MCP 406 for Codex rmcp clients** — Codex's Rust rmcp client does not send `Accept: application/json, text/event-stream`; server now normalizes the header before the SDK validates it so the connection succeeds.
+
 ## [1.23.1] - 2026-04-20
 
 ### Fixed

package/bin/hosted-setup.js

@@ -31,6 +31,8 @@ const HOSTED_URL = 'https://rrr-search-hosted.fly.dev/mcp';
 const GH_APP_INSTALL_URL = 'https://github.com/apps/rrr-search/installations/new';
 const MCP_NAME = 'rrr-search-hosted';
 const CODEX_CONFIG_PATH = path.join(os.homedir(), '.codex', 'config.toml');
+const CODEX_BEARER_ENV_VAR = 'RRR_HOSTED_BEARER';
+const CODEX_ENV_FILE = path.join(os.homedir(), '.config', 'projecta-rrr', 'rrr-hosted.env');
 
 // ──────────────────────────────── UI ──────────────────────────────────────
 
@@ -136,7 +138,7 @@ function registerCodexMcp (bearer) {
   content = content.replace(sectionRegex, '').trimEnd();
 
   // Append new registration
-  const section = `\n\n[mcp_servers.${MCP_NAME}]\nurl = "${HOSTED_URL}"\nheaders = { Authorization = "Bearer ${bearer}" }\n`;
+  const section = `\n\n[mcp_servers.${MCP_NAME}]\nurl = "${HOSTED_URL}"\nbearer_token_env_var = "${CODEX_BEARER_ENV_VAR}"\n`;
   content = content + section;
 
   // Ensure ~/.codex directory exists
@@ -144,6 +146,15 @@ function registerCodexMcp (bearer) {
   fs.writeFileSync(CODEX_CONFIG_PATH, content, 'utf8');
 }
 
+function writeCodexBearerEnv (bearer) {
+  fs.mkdirSync(path.dirname(CODEX_ENV_FILE), { recursive: true });
+  fs.writeFileSync(
+    CODEX_ENV_FILE,
+    `export ${CODEX_BEARER_ENV_VAR}=${JSON.stringify(bearer)}\n`,
+    'utf8'
+  );
+}
+
 // ──────────────────────────────── flow ────────────────────────────────────
 
 async function main () {
@@ -177,7 +188,7 @@ async function main () {
   step(2, TOTAL_STEPS, 'Team bearer token');
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
 
-  let bearer = args.bearer || process.env.RRR_HOSTED_MCP_TOKEN || null;
+  let bearer = args.bearer || process.env.RRR_HOSTED_BEARER || process.env.RRR_HOSTED_MCP_TOKEN || null;
   if (!bearer && !args.yes) {
     info('You need a bearer token of the form: rrr_<prefix>_<32chars>');
     info('New team? Ask your rrr-search admin to run:');
@@ -192,6 +203,9 @@ async function main () {
       err('Bearer format invalid. Expected rrr_<prefix>_<32chars>.');
       process.exit(1);
     }
+    if (!args.bearer && process.env.RRR_HOSTED_MCP_TOKEN && !process.env.RRR_HOSTED_BEARER) {
+      warn('RRR_HOSTED_MCP_TOKEN is deprecated for this launcher; prefer RRR_HOSTED_BEARER.');
+    }
     ok(`Bearer captured (team prefix: ${bearer.split('_')[1]})`);
   } else {
     warn('No bearer — skipping MCP registration. You can run this wizard again after getting one.');
@@ -294,8 +308,11 @@ async function main () {
     }
     try {
       registerCodexMcp(bearer);
+      writeCodexBearerEnv(bearer);
       ok(`Registered ${MCP_NAME} in ~/.codex/config.toml`);
-      info('Same bearer token works for both Claude Code and Codex (MCP-02)');
+      info(`Codex will read the bearer from ${CODEX_BEARER_ENV_VAR}`);
+      info(`Codex launcher env file written to ${CODEX_ENV_FILE}`);
+      info(`Run scripts/codex-rrr.sh to launch Codex with RRR ready`);
     } catch (e) {
       warn(`Could not write ~/.codex/config.toml: ${e.message}`);
       info('You can manually add the MCP server entry — see docs/hosted-search-setup.md');

package/bin/install.js

@@ -2219,7 +2219,9 @@ function install(isGlobal) {
         verbose: false
       });
       if (agentResult.errors.length === 0) {
-        console.log(`  ${green}✓${reset} Installed ${agentResult.written.length} Codex agent configs to ~/.codex/agents/`);
+        const removedCount = agentResult.removed.length;
+        const removedText = removedCount > 0 ? `, pruned ${removedCount} stale configs` : '';
+        console.log(`  ${green}✓${reset} Installed ${agentResult.written.length} Codex agent configs to ~/.codex/agents/${removedText}`);
       } else {
         console.log(`  ${yellow}⚠${reset} Installed ${agentResult.written.length} agent configs (${agentResult.errors.length} errors)`);
         agentResult.errors.slice(0, 3).forEach(e => {

package/docs/hosted-search-setup.md

@@ -43,6 +43,12 @@ npx projecta-rrr@1.21.0 --enable-hosted
 #    The installer registered `rrr-search-hosted` pointed at https://rrr-search-hosted.fly.dev/mcp.
 ```
 
+For Codex, use `scripts/codex-rrr.sh` to launch the CLI with the hosted bearer loaded from
+`~/.config/projecta-rrr/rrr-hosted.env`. Codex accepts the same `$rrr-*` trigger text, but it
+does not provide Claude-style live autocomplete for those triggers while you type.
+From this repo, `npm run codex:rrr -- <args>` is the shortest way to start Codex with the RRR
+environment loaded.
+
 **What happens under the hood:**
 
 1. The installer writes `rrr-search-hosted` into `~/.claude/mcp.registry.json` with `disabled:false`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "projecta-rrr",
-  "version": "1.23.1",
+  "version": "1.23.4",
   "description": "A meta-prompting, context engineering and spec-driven development system for Claude Code by Projecta.ai",
   "bin": {
     "projecta-rrr": "bin/install.js",
@@ -16,6 +16,7 @@
     "test": "node --test tests/*.test.js && jest",
     "test:node": "node --test tests/*.test.js",
     "test:jest": "jest",
+    "codex:rrr": "bash scripts/codex-rrr.sh",
     "test:browser": "vitest --browser",
     "test:ui": "vitest --ui",
     "mcp:setup": "bash scripts/mcp-setup.sh",

package/rrr/lib/codex-agent-gen.js

@@ -20,6 +20,8 @@ const TIER_MAP = {
   inherit: { tier: 'ADAPTIVE', model: 'gpt-4o', fallback_model: 'o1' },
 };
 
+const LEGACY_TOP_LEVEL_FIELDS = ['tier', 'fallback_model'];
+
 /**
  * Parse the YAML frontmatter from a markdown string.
  *
@@ -75,6 +77,21 @@ function extractField(lines, key) {
   return null;
 }
 
+/**
+ * Guard against old Codex-only metadata leaking into generated TOML.
+ *
+ * Current Codex CLI agent files accept only name, description, model, and
+ * developer_instructions. Legacy tier/fallback_model keys cause Codex to
+ * reject the entire agent definition, so we fail fast if they ever reappear.
+ */
+function assertNoLegacyTopLevelFields(toml, filename) {
+  for (const field of LEGACY_TOP_LEVEL_FIELDS) {
+    if (new RegExp(`^\\s*${field}\\s*=`, 'm').test(toml)) {
+      throw new Error(`Generated ${filename} contains unsupported field "${field}"`);
+    }
+  }
+}
+
 /**
  * Convert a single RRR agent markdown file (Claude Code format) into
  * a Codex-compatible TOML agent config string.
@@ -84,7 +101,7 @@ function extractField(lines, key) {
  * @returns {string} Generated TOML string for ~/.codex/agents/<basename>.toml
  */
 function generateCodexAgentToml(sourceMarkdown, filename) {
-  const { frontmatterLines } = parseFrontmatter(sourceMarkdown);
+  const { frontmatterLines, body } = parseFrontmatter(sourceMarkdown);
 
   // Extract fields from frontmatter
   const nameField = extractField(frontmatterLines, 'name');
@@ -97,7 +114,12 @@ function generateCodexAgentToml(sourceMarkdown, filename) {
   // Look up tier mapping; default to STANDARD (sonnet) if model not found
   const tierEntry = TIER_MAP[modelField] || TIER_MAP.sonnet;
 
-  // Build TOML lines — only fields Codex CLI accepts
+  // developer_instructions: body of the markdown file (the system prompt).
+  // Truncated to 3000 chars; uses TOML literal multi-line strings (''') which
+  // need zero escaping — safe as long as the body contains no ''' sequence.
+  const instructions = body.trim().slice(0, 3000);
+
+  // Build TOML — only fields Codex CLI accepts
   const lines = [
     '# Generated by projecta-rrr — do not edit manually',
     `# Source: agents/${filename}`,
@@ -105,9 +127,14 @@ function generateCodexAgentToml(sourceMarkdown, filename) {
     `name = "${agentName}"`,
     `description = "${descriptionField || agentName}"`,
     `model = "${tierEntry.model}"`,
+    `developer_instructions = '''`,
+    instructions,
+    `'''`,
   ];
 
-  return lines.join('\n') + '\n';
+  const toml = lines.join('\n') + '\n';
+  assertNoLegacyTopLevelFields(toml, filename);
+  return toml;
 }
 
 /**
@@ -122,7 +149,7 @@ function generateCodexAgentToml(sourceMarkdown, filename) {
  * @param {string}  options.targetDir - Absolute path to target directory (e.g. ~/.codex/agents/)
  * @param {boolean} [options.dryRun=false] - If true, compute paths but skip writing
  * @param {boolean} [options.verbose=false] - If true, log each file written
- * @returns {{ written: string[], skipped: string[], errors: Array<{file: string, error: string}> }}
+ * @returns {{ written: string[], skipped: string[], removed: string[], errors: Array<{file: string, error: string}> }}
  */
 function installCodexAgents(options) {
   const {
@@ -134,6 +161,7 @@ function installCodexAgents(options) {
 
   const written = [];
   const skipped = [];
+  const removed = [];
   const errors = [];
 
   // Ensure target directory exists (no-op if already exists)
@@ -181,7 +209,26 @@ function installCodexAgents(options) {
     }
   }
 
-  return { written, skipped, errors };
+  if (!dryRun) {
+    const managedFiles = new Set(written);
+    try {
+      const existingTargets = fs.readdirSync(targetDir);
+      for (const targetEntry of existingTargets) {
+        if (!targetEntry.endsWith('.toml')) {
+          continue;
+        }
+        if (managedFiles.has(targetEntry)) {
+          continue;
+        }
+        fs.unlinkSync(path.join(targetDir, targetEntry));
+        removed.push(targetEntry);
+      }
+    } catch (err) {
+      errors.push({ file: targetDir, error: `Cannot prune targetDir: ${err.message}` });
+    }
+  }
+
+  return { written, skipped, removed, errors };
 }
 
 module.exports = {

package/scripts/codex-rrr.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+ENV_FILE="${RRR_HOSTED_ENV_FILE:-$HOME/.config/projecta-rrr/rrr-hosted.env}"
+
+if [[ -f "$ENV_FILE" ]]; then
+  # shellcheck disable=SC1090
+  source "$ENV_FILE"
+fi
+
+if [[ -z "${RRR_HOSTED_BEARER:-}" ]]; then
+  cat >&2 <<'EOF'
+RRR_HOSTED_BEARER is unset.
+Set it in ~/.config/projecta-rrr/rrr-hosted.env or export it before launching Codex.
+EOF
+  exit 1
+fi
+
+exec codex "$@"