rivet-design 0.12.3 → 0.13.0

package/dist/install/allowlists.js

@@ -0,0 +1,333 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyCodexRules = exports.removeCodexRules = exports.writeCodexRules = exports.codexRulesPath = exports.verifyCursorAllowlist = exports.removeCursorAllowlist = exports.writeCursorAllowlist = exports.cursorPermissionsPath = exports.verifyClaudeAllowlist = exports.removeClaudeAllowlist = exports.writeClaudeAllowlist = exports.claudeSettingsPath = exports.CODEX_RULES_CONTENT = exports.CODEX_RULES_FILENAME = exports.CURSOR_ALLOWLIST_ENTRIES = exports.CLAUDE_ALLOWLIST_ENTRIES = void 0;
+/* eslint-disable no-console */
+const childProcess = __importStar(require("child_process"));
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+/**
+ * User-scope host command allowlists: `rivet install` writes each host's
+ * allowlist entry so agent invocations of `rivet` never hit a shell-approval
+ * prompt, and `rivet uninstall` removes exactly the entries it wrote.
+ *
+ * Entries are written at user scope ONLY — never into a project's config —
+ * because repos must not be able to grant themselves capabilities. Prefix
+ * allowlists do not cover chained or wrapped commands, so the guidance files
+ * instruct plain, unchained `rivet …` invocations.
+ */
+/** Allowlisted command forms, in each host's own syntax. */
+exports.CLAUDE_ALLOWLIST_ENTRIES = [
+    'Bash(rivet *)',
+    'Bash(npx -y rivet-design@latest *)',
+];
+exports.CURSOR_ALLOWLIST_ENTRIES = [
+    'rivet',
+    'npx -y rivet-design@latest',
+];
+exports.CODEX_RULES_FILENAME = 'rivet.rules';
+/**
+ * Codex execpolicy rules (Starlark `prefix_rule`) in a dedicated file under
+ * `~/.codex/rules/` — `default.rules` is reserved for entries Codex itself
+ * writes from the TUI. Verified against the shipped layout: Codex loads
+ * every `*.rules` file under `$CODEX_HOME/rules/` at startup.
+ */
+exports.CODEX_RULES_CONTENT = `# Written by \`rivet install codex\`; removed by \`rivet uninstall codex\`.
+# Allows the Rivet design CLI to run without per-call approval prompts.
+prefix_rule(
+    pattern = ["rivet"],
+    decision = "allow",
+    justification = "Rivet design CLI (installed via rivet install)",
+    match = ["rivet status", "rivet variants start --instruction x"],
+)
+
+prefix_rule(
+    pattern = ["npx", "-y", "rivet-design@latest"],
+    decision = "allow",
+    justification = "Rivet design CLI via npx (installed via rivet install)",
+    match = ["npx -y rivet-design@latest status"],
+)
+`;
+const readJsonObject = (filePath) => {
+    if (!fs_1.default.existsSync(filePath)) {
+        return { ok: true, value: {} };
+    }
+    try {
+        const parsed = JSON.parse(fs_1.default.readFileSync(filePath, 'utf8'));
+        if (parsed === null ||
+            typeof parsed !== 'object' ||
+            Array.isArray(parsed)) {
+            return {
+                ok: false,
+                error: `${filePath} is not a JSON object. Fix or delete it manually, then re-run.`,
+            };
+        }
+        return { ok: true, value: parsed };
+    }
+    catch {
+        return {
+            ok: false,
+            error: `could not parse ${filePath}. Fix or delete it manually, then re-run.`,
+        };
+    }
+};
+const writeJsonObject = (filePath, value) => {
+    fs_1.default.mkdirSync(path_1.default.dirname(filePath), { recursive: true });
+    fs_1.default.writeFileSync(filePath, JSON.stringify(value, null, 2) + '\n', 'utf8');
+};
+const errorMessage = (err) => err instanceof Error ? err.message : String(err);
+// ---------------------------------------------------------------------------
+// Claude Code — `permissions.allow` in user-scope ~/.claude/settings.json
+// ---------------------------------------------------------------------------
+const claudeSettingsPath = (homeDir = os_1.default.homedir()) => path_1.default.join(homeDir, '.claude', 'settings.json');
+exports.claudeSettingsPath = claudeSettingsPath;
+/** Add Rivet's `permissions.allow` entries, preserving everything else. */
+const writeClaudeAllowlist = (homeDir = os_1.default.homedir()) => {
+    const filePath = (0, exports.claudeSettingsPath)(homeDir);
+    const parsed = readJsonObject(filePath);
+    if (!parsed.ok)
+        return { ok: false, error: parsed.error };
+    const settings = parsed.value;
+    const permissions = settings.permissions !== null &&
+        typeof settings.permissions === 'object' &&
+        !Array.isArray(settings.permissions)
+        ? settings.permissions
+        : {};
+    const allow = Array.isArray(permissions.allow)
+        ? [...permissions.allow]
+        : [];
+    const missing = exports.CLAUDE_ALLOWLIST_ENTRIES.filter((entry) => !allow.includes(entry));
+    if (missing.length > 0) {
+        allow.push(...missing);
+    }
+    settings.permissions = { ...permissions, allow };
+    try {
+        writeJsonObject(filePath, settings);
+    }
+    catch (err) {
+        return { ok: false, error: errorMessage(err) };
+    }
+    return {
+        ok: true,
+        changed: missing.length > 0,
+        verified: (0, exports.verifyClaudeAllowlist)(homeDir),
+    };
+};
+exports.writeClaudeAllowlist = writeClaudeAllowlist;
+/** Remove exactly Rivet's entries, leaving user-authored rules untouched. */
+const removeClaudeAllowlist = (homeDir = os_1.default.homedir()) => {
+    const filePath = (0, exports.claudeSettingsPath)(homeDir);
+    if (!fs_1.default.existsSync(filePath))
+        return { ok: true, changed: false };
+    const parsed = readJsonObject(filePath);
+    if (!parsed.ok)
+        return { ok: false, error: parsed.error };
+    const settings = parsed.value;
+    const permissions = settings.permissions !== null &&
+        typeof settings.permissions === 'object' &&
+        !Array.isArray(settings.permissions)
+        ? settings.permissions
+        : null;
+    if (!permissions || !Array.isArray(permissions.allow)) {
+        return { ok: true, changed: false };
+    }
+    const currentAllow = permissions.allow;
+    const before = currentAllow.length;
+    const remaining = currentAllow.filter((entry) => !exports.CLAUDE_ALLOWLIST_ENTRIES.includes(entry));
+    if (remaining.length === before) {
+        return { ok: true, changed: false };
+    }
+    permissions.allow = remaining;
+    try {
+        writeJsonObject(filePath, settings);
+    }
+    catch (err) {
+        return { ok: false, error: errorMessage(err) };
+    }
+    return { ok: true, changed: true };
+};
+exports.removeClaudeAllowlist = removeClaudeAllowlist;
+/** Re-read the settings file and confirm the entries are present. */
+const verifyClaudeAllowlist = (homeDir = os_1.default.homedir()) => {
+    const parsed = readJsonObject((0, exports.claudeSettingsPath)(homeDir));
+    if (!parsed.ok)
+        return false;
+    const allow = parsed.value.permissions
+        ?.allow;
+    return (Array.isArray(allow) &&
+        exports.CLAUDE_ALLOWLIST_ENTRIES.every((entry) => allow.includes(entry)));
+};
+exports.verifyClaudeAllowlist = verifyClaudeAllowlist;
+// ---------------------------------------------------------------------------
+// Cursor — `terminalAllowlist` in user-scope ~/.cursor/permissions.json
+// ---------------------------------------------------------------------------
+const cursorPermissionsPath = (homeDir = os_1.default.homedir()) => path_1.default.join(homeDir, '.cursor', 'permissions.json');
+exports.cursorPermissionsPath = cursorPermissionsPath;
+/**
+ * Add Rivet's `terminalAllowlist` entries. Note Cursor's semantics: once
+ * `terminalAllowlist` is defined in permissions.json it REPLACES the in-app
+ * terminal allowlist (the file is authoritative); per-user and per-repo
+ * files still concatenate.
+ */
+const writeCursorAllowlist = (homeDir = os_1.default.homedir()) => {
+    const filePath = (0, exports.cursorPermissionsPath)(homeDir);
+    const parsed = readJsonObject(filePath);
+    if (!parsed.ok)
+        return { ok: false, error: parsed.error };
+    const permissions = parsed.value;
+    const allowlist = Array.isArray(permissions.terminalAllowlist)
+        ? [...permissions.terminalAllowlist]
+        : [];
+    const missing = exports.CURSOR_ALLOWLIST_ENTRIES.filter((entry) => !allowlist.includes(entry));
+    if (missing.length > 0) {
+        allowlist.push(...missing);
+    }
+    permissions.terminalAllowlist = allowlist;
+    try {
+        writeJsonObject(filePath, permissions);
+    }
+    catch (err) {
+        return { ok: false, error: errorMessage(err) };
+    }
+    return {
+        ok: true,
+        changed: missing.length > 0,
+        verified: (0, exports.verifyCursorAllowlist)(homeDir),
+    };
+};
+exports.writeCursorAllowlist = writeCursorAllowlist;
+const removeCursorAllowlist = (homeDir = os_1.default.homedir()) => {
+    const filePath = (0, exports.cursorPermissionsPath)(homeDir);
+    if (!fs_1.default.existsSync(filePath))
+        return { ok: true, changed: false };
+    const parsed = readJsonObject(filePath);
+    if (!parsed.ok)
+        return { ok: false, error: parsed.error };
+    const permissions = parsed.value;
+    if (!Array.isArray(permissions.terminalAllowlist)) {
+        return { ok: true, changed: false };
+    }
+    const before = permissions.terminalAllowlist.length;
+    const remaining = permissions.terminalAllowlist.filter((entry) => !exports.CURSOR_ALLOWLIST_ENTRIES.includes(entry));
+    if (remaining.length === before) {
+        return { ok: true, changed: false };
+    }
+    if (remaining.length === 0) {
+        // Removing the key restores Cursor's in-app allowlist behavior instead of
+        // leaving an empty (still-authoritative) file-defined list.
+        delete permissions.terminalAllowlist;
+    }
+    else {
+        permissions.terminalAllowlist = remaining;
+    }
+    try {
+        writeJsonObject(filePath, permissions);
+    }
+    catch (err) {
+        return { ok: false, error: errorMessage(err) };
+    }
+    return { ok: true, changed: true };
+};
+exports.removeCursorAllowlist = removeCursorAllowlist;
+const verifyCursorAllowlist = (homeDir = os_1.default.homedir()) => {
+    const parsed = readJsonObject((0, exports.cursorPermissionsPath)(homeDir));
+    if (!parsed.ok)
+        return false;
+    const allowlist = parsed.value.terminalAllowlist;
+    return (Array.isArray(allowlist) &&
+        exports.CURSOR_ALLOWLIST_ENTRIES.every((entry) => allowlist.includes(entry)));
+};
+exports.verifyCursorAllowlist = verifyCursorAllowlist;
+// ---------------------------------------------------------------------------
+// Codex — execpolicy rules file under ~/.codex/rules/
+// ---------------------------------------------------------------------------
+const codexRulesPath = (homeDir = os_1.default.homedir()) => path_1.default.join(homeDir, '.codex', 'rules', exports.CODEX_RULES_FILENAME);
+exports.codexRulesPath = codexRulesPath;
+const writeCodexRules = (homeDir = os_1.default.homedir()) => {
+    const filePath = (0, exports.codexRulesPath)(homeDir);
+    const existing = fs_1.default.existsSync(filePath)
+        ? fs_1.default.readFileSync(filePath, 'utf8')
+        : null;
+    if (existing === exports.CODEX_RULES_CONTENT) {
+        return { ok: true, changed: false, verified: (0, exports.verifyCodexRules)(homeDir) };
+    }
+    try {
+        fs_1.default.mkdirSync(path_1.default.dirname(filePath), { recursive: true });
+        fs_1.default.writeFileSync(filePath, exports.CODEX_RULES_CONTENT, 'utf8');
+    }
+    catch (err) {
+        return { ok: false, error: errorMessage(err) };
+    }
+    return { ok: true, changed: true, verified: (0, exports.verifyCodexRules)(homeDir) };
+};
+exports.writeCodexRules = writeCodexRules;
+const removeCodexRules = (homeDir = os_1.default.homedir()) => {
+    const filePath = (0, exports.codexRulesPath)(homeDir);
+    if (!fs_1.default.existsSync(filePath))
+        return { ok: true, changed: false };
+    try {
+        fs_1.default.unlinkSync(filePath);
+    }
+    catch (err) {
+        return { ok: false, error: errorMessage(err) };
+    }
+    return { ok: true, changed: true };
+};
+exports.removeCodexRules = removeCodexRules;
+/**
+ * Confirm the written rules actually suppress the prompt by asking Codex's
+ * own policy checker (`codex execpolicy check`). Falls back to a file-content
+ * check when the Codex binary is unavailable or the (preview) subcommand is
+ * not supported — install surfaces which level of verification ran.
+ */
+const verifyCodexRules = (homeDir = os_1.default.homedir(), execSync = childProcess.execSync) => {
+    const filePath = (0, exports.codexRulesPath)(homeDir);
+    if (!fs_1.default.existsSync(filePath))
+        return false;
+    try {
+        const output = execSync(`codex execpolicy check --rules ${JSON.stringify(filePath)} -- rivet status`, { stdio: ['ignore', 'pipe', 'ignore'], encoding: 'utf8' });
+        return /"?decision"?\s*[:=]\s*"?allow"?/i.test(output);
+    }
+    catch {
+        // Binary missing or execpolicy preview unavailable — content check only.
+        return fs_1.default.readFileSync(filePath, 'utf8').includes('pattern = ["rivet"]');
+    }
+};
+exports.verifyCodexRules = verifyCodexRules;
+//# sourceMappingURL=allowlists.js.map

package/dist/install/allowlists.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlists.js","sourceRoot":"","sources":["../../src/install/allowlists.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+BAA+B;AAC/B,4DAA8C;AAC9C,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AAExB;;;;;;;;;GASG;AAEH,4DAA4D;AAC/C,QAAA,wBAAwB,GAAG;IACtC,eAAe;IACf,oCAAoC;CAC5B,CAAC;AAEE,QAAA,wBAAwB,GAAG;IACtC,OAAO;IACP,4BAA4B;CACpB,CAAC;AAEE,QAAA,oBAAoB,GAAG,aAAa,CAAC;AAElD;;;;;GAKG;AACU,QAAA,mBAAmB,GAAG;;;;;;;;;;;;;;;CAelC,CAAC;AASF,MAAM,cAAc,GAAG,CACrB,QAAgB,EAGe,EAAE;IACjC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7D,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,QAAQ,gEAAgE;aACnF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAiC,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,mBAAmB,QAAQ,2CAA2C;SAC9E,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,QAAgB,EAChB,KAA8B,EACxB,EAAE;IACR,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,GAAY,EAAU,EAAE,CAC5C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAEnD,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAEvE,MAAM,kBAAkB,GAAG,CAAC,UAAkB,YAAE,CAAC,OAAO,EAAE,EAAU,EAAE,CAC3E,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AADpC,QAAA,kBAAkB,sBACkB;AAEjD,2EAA2E;AACpE,MAAM,oBAAoB,GAAG,CAClC,UAAkB,YAAE,CAAC,OAAO,EAAE,EACR,EAAE;IACxB,MAAM,QAAQ,GAAG,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAE1D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;IAC9B,MAAM,WAAW,GACf,QAAQ,CAAC,WAAW,KAAK,IAAI;QAC7B,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ;QACxC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,CAAC,CAAE,QAAQ,CAAC,WAAuC;QACnD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;QAC5C,CAAC,CAAC,CAAC,GAAI,WAAW,CAAC,KAAmB,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAG,gCAAwB,CAAC,MAAM,CAC7C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAClC,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,QAAQ,CAAC,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,CAAC;IAEjD,IAAI,CAAC;QACH,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;QAC3B,QAAQ,EAAE,IAAA,6BAAqB,EAAC,OAAO,CAAC;KACzC,CAAC;AACJ,CAAC,CAAC;AAnCW,QAAA,oBAAoB,wBAmC/B;AAEF,6EAA6E;AACtE,MAAM,qBAAqB,GAAG,CACnC,UAAkB,YAAE,CAAC,OAAO,EAAE,EACP,EAAE;IACzB,MAAM,QAAQ,GAAG,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAE1D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;IAC9B,MAAM,WAAW,GACf,QAAQ,CAAC,WAAW,KAAK,IAAI;QAC7B,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ;QACxC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,CAAC,CAAE,QAAQ,CAAC,WAAuC;QACnD,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAkB,CAAC;IACpD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IACnC,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CACnC,CAAC,KAAK,EAAE,EAAE,CACR,CAAE,gCAA+C,CAAC,QAAQ,CAAC,KAAK,CAAC,CACpE,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,WAAW,CAAC,KAAK,GAAG,SAAS,CAAC;IAC9B,IAAI,CAAC;QACH,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC,CAAC;AAlCW,QAAA,qBAAqB,yBAkChC;AAEF,qEAAqE;AAC9D,MAAM,qBAAqB,GAAG,CACnC,UAAkB,YAAE,CAAC,OAAO,EAAE,EACrB,EAAE;IACX,MAAM,MAAM,GAAG,cAAc,CAAC,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAI,MAAM,CAAC,KAAK,CAAC,WAAiD;QAC3E,EAAE,KAAK,CAAC;IACV,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,gCAAwB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,qBAAqB,yBAWhC;AAEF,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAEvE,MAAM,qBAAqB,GAAG,CAAC,UAAkB,YAAE,CAAC,OAAO,EAAE,EAAU,EAAE,CAC9E,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AADvC,QAAA,qBAAqB,yBACkB;AAEpD;;;;;GAKG;AACI,MAAM,oBAAoB,GAAG,CAClC,UAAkB,YAAE,CAAC,OAAO,EAAE,EACR,EAAE;IACxB,MAAM,QAAQ,GAAG,IAAA,6BAAqB,EAAC,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAE1D,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC;QAC5D,CAAC,CAAC,CAAC,GAAI,WAAW,CAAC,iBAA+B,CAAC;QACnD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAG,gCAAwB,CAAC,MAAM,CAC7C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CACtC,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,WAAW,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAE1C,IAAI,CAAC;QACH,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;QAC3B,QAAQ,EAAE,IAAA,6BAAqB,EAAC,OAAO,CAAC;KACzC,CAAC;AACJ,CAAC,CAAC;AA7BW,QAAA,oBAAoB,wBA6B/B;AAEK,MAAM,qBAAqB,GAAG,CACnC,UAAkB,YAAE,CAAC,OAAO,EAAE,EACP,EAAE;IACzB,MAAM,QAAQ,GAAG,IAAA,6BAAqB,EAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAE1D,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,MAAM,GAAI,WAAW,CAAC,iBAA+B,CAAC,MAAM,CAAC;IACnE,MAAM,SAAS,GAAI,WAAW,CAAC,iBAA+B,CAAC,MAAM,CACnE,CAAC,KAAK,EAAE,EAAE,CACR,CAAE,gCAA+C,CAAC,QAAQ,CAAC,KAAK,CAAC,CACpE,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,0EAA0E;QAC1E,4DAA4D;QAC5D,OAAO,WAAW,CAAC,iBAAiB,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC;QACH,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC,CAAC;AAjCW,QAAA,qBAAqB,yBAiChC;AAEK,MAAM,qBAAqB,GAAG,CACnC,UAAkB,YAAE,CAAC,OAAO,EAAE,EACrB,EAAE;IACX,MAAM,MAAM,GAAG,cAAc,CAAC,IAAA,6BAAqB,EAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACjD,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACxB,gCAAwB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CACrE,CAAC;AACJ,CAAC,CAAC;AAVW,QAAA,qBAAqB,yBAUhC;AAEF,8EAA8E;AAC9E,sDAAsD;AACtD,8EAA8E;AAEvE,MAAM,cAAc,GAAG,CAAC,UAAkB,YAAE,CAAC,OAAO,EAAE,EAAU,EAAE,CACvE,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,4BAAoB,CAAC,CAAC;AADjD,QAAA,cAAc,kBACmC;AAEvD,MAAM,eAAe,GAAG,CAC7B,UAAkB,YAAE,CAAC,OAAO,EAAE,EACR,EAAE;IACxB,MAAM,QAAQ,GAAG,IAAA,sBAAc,EAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QACtC,CAAC,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;QACnC,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,QAAQ,KAAK,2BAAmB,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAA,wBAAgB,EAAC,OAAO,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC;QACH,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,2BAAmB,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAA,wBAAgB,EAAC,OAAO,CAAC,EAAE,CAAC;AAC1E,CAAC,CAAC;AAjBW,QAAA,eAAe,mBAiB1B;AAEK,MAAM,gBAAgB,GAAG,CAC9B,UAAkB,YAAE,CAAC,OAAO,EAAE,EACP,EAAE;IACzB,MAAM,QAAQ,GAAG,IAAA,sBAAc,EAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAClE,IAAI,CAAC;QACH,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC,CAAC;AAXW,QAAA,gBAAgB,oBAW3B;AAEF;;;;;GAKG;AACI,MAAM,gBAAgB,GAAG,CAC9B,UAAkB,YAAE,CAAC,OAAO,EAAE,EAC9B,WAAyC,YAAY,CAAC,QAAQ,EACrD,EAAE;IACX,MAAM,QAAQ,GAAG,IAAA,sBAAc,EAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CACrB,kCAAkC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAC5E,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAC1D,CAAC;QACF,OAAO,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,OAAO,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC,CAAC;AAhBW,QAAA,gBAAgB,oBAgB3B"}

package/dist/install/codexGuidance.d.ts

@@ -0,0 +1,11 @@
+export declare const codexAgentsPath: (homeDir?: string) => string;
+export type GuidanceResult = {
+    ok: true;
+    changed: boolean;
+} | {
+    ok: false;
+    error: string;
+};
+export declare const writeCodexGuidance: (homeDir?: string) => GuidanceResult;
+export declare const removeCodexGuidance: (homeDir?: string) => GuidanceResult;
+//# sourceMappingURL=codexGuidance.d.ts.map

package/dist/install/codexGuidance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexGuidance.d.ts","sourceRoot":"","sources":["../../src/install/codexGuidance.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,eAAe,GAAI,UAAS,MAAqB,KAAG,MACtB,CAAC;AAsB5C,MAAM,MAAM,cAAc,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,eAAO,MAAM,kBAAkB,GAC7B,UAAS,MAAqB,KAC7B,cAsBF,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,UAAS,MAAqB,KAC7B,cAmBF,CAAC"}

package/dist/install/codexGuidance.js

@@ -0,0 +1,90 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removeCodexGuidance = exports.writeCodexGuidance = exports.codexAgentsPath = void 0;
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const cli_guidance_1 = require("../utils/skills/cli-guidance");
+/**
+ * Codex guidance: a marker-delimited Rivet section appended to the global
+ * `~/.codex/AGENTS.md` (Codex's user-scope instructions file). Install
+ * replaces the section between the markers; uninstall removes exactly it,
+ * leaving the user's own instructions untouched.
+ */
+const SECTION_BEGIN = '<!-- BEGIN RIVET (written by `rivet install codex`) -->';
+const SECTION_END = '<!-- END RIVET -->';
+const codexAgentsPath = (homeDir = os_1.default.homedir()) => path_1.default.join(homeDir, '.codex', 'AGENTS.md');
+exports.codexAgentsPath = codexAgentsPath;
+const buildSection = () => [
+    SECTION_BEGIN,
+    `<!-- rivet-cli-guidance-version: ${cli_guidance_1.CLI_GUIDANCE_VERSION} -->`,
+    '# Rivet',
+    '',
+    cli_guidance_1.CLI_GUIDANCE_BODY,
+    SECTION_END,
+].join('\n');
+const stripSection = (contents) => {
+    const begin = contents.indexOf(SECTION_BEGIN);
+    if (begin === -1)
+        return contents;
+    const end = contents.indexOf(SECTION_END, begin);
+    if (end === -1)
+        return contents;
+    const before = contents.slice(0, begin).replace(/\n+$/, '\n');
+    const after = contents.slice(end + SECTION_END.length).replace(/^\n+/, '\n');
+    return `${before}${after}`.trim() ? `${before}${after}` : '';
+};
+const writeCodexGuidance = (homeDir = os_1.default.homedir()) => {
+    const filePath = (0, exports.codexAgentsPath)(homeDir);
+    try {
+        const existing = fs_1.default.existsSync(filePath)
+            ? fs_1.default.readFileSync(filePath, 'utf8')
+            : '';
+        const withoutSection = stripSection(existing);
+        const next = withoutSection
+            ? `${withoutSection.replace(/\n+$/, '')}\n\n${buildSection()}\n`
+            : `${buildSection()}\n`;
+        if (next === existing) {
+            return { ok: true, changed: false };
+        }
+        fs_1.default.mkdirSync(path_1.default.dirname(filePath), { recursive: true });
+        fs_1.default.writeFileSync(filePath, next, 'utf8');
+        return { ok: true, changed: true };
+    }
+    catch (err) {
+        return {
+            ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+};
+exports.writeCodexGuidance = writeCodexGuidance;
+const removeCodexGuidance = (homeDir = os_1.default.homedir()) => {
+    const filePath = (0, exports.codexAgentsPath)(homeDir);
+    if (!fs_1.default.existsSync(filePath))
+        return { ok: true, changed: false };
+    try {
+        const existing = fs_1.default.readFileSync(filePath, 'utf8');
+        const next = stripSection(existing);
+        if (next === existing)
+            return { ok: true, changed: false };
+        if (next.trim() === '') {
+            fs_1.default.unlinkSync(filePath);
+        }
+        else {
+            fs_1.default.writeFileSync(filePath, next, 'utf8');
+        }
+        return { ok: true, changed: true };
+    }
+    catch (err) {
+        return {
+            ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+};
+exports.removeCodexGuidance = removeCodexGuidance;
+//# sourceMappingURL=codexGuidance.js.map

package/dist/install/codexGuidance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexGuidance.js","sourceRoot":"","sources":["../../src/install/codexGuidance.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,+DAGsC;AAEtC;;;;;GAKG;AAEH,MAAM,aAAa,GAAG,yDAAyD,CAAC;AAChF,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAElC,MAAM,eAAe,GAAG,CAAC,UAAkB,YAAE,CAAC,OAAO,EAAE,EAAU,EAAE,CACxE,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAD/B,QAAA,eAAe,mBACgB;AAE5C,MAAM,YAAY,GAAG,GAAW,EAAE,CAChC;IACE,aAAa;IACb,oCAAoC,mCAAoB,MAAM;IAC9D,SAAS;IACT,EAAE;IACF,gCAAiB;IACjB,WAAW;CACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAU,EAAE;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7E,OAAO,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC,CAAC;AAKK,MAAM,kBAAkB,GAAG,CAChC,UAAkB,YAAE,CAAC,OAAO,EAAE,EACd,EAAE;IAClB,MAAM,QAAQ,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YACtC,CAAC,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;YACnC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,cAAc;YACzB,CAAC,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,YAAY,EAAE,IAAI;YAChE,CAAC,CAAC,GAAG,YAAY,EAAE,IAAI,CAAC;QAC1B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;QACD,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAxBW,QAAA,kBAAkB,sBAwB7B;AAEK,MAAM,mBAAmB,GAAG,CACjC,UAAkB,YAAE,CAAC,OAAO,EAAE,EACd,EAAE;IAClB,MAAM,QAAQ,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACvB,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AArBW,QAAA,mBAAmB,uBAqB9B"}

package/dist/install/harnesses.d.ts

@@ -1,16 +1,32 @@
+import { verifyCodexRules } from './allowlists';
 /**
  * Outcome of installing Rivet into a single harness.
- * `ok` — the MCP server is registered (or was already). `changed` — config was
- * actually written this run. Methods never call process.exit so the unified
- * "install everywhere" loop can keep going past a single failure.
+ * `ok` — the agent is set up for CLI-first Rivet (or was already).
+ * `changed` — config was actually written this run. Methods never call
+ * process.exit so the unified "install everywhere" loop can keep going past
+ * a single failure.
  */
 export type InstallOutcome = {
     ok: boolean;
     changed: boolean;
 };
+/**
+ * Options for one install run. `mcp` is the opt-in from `rivet install
+ * --mcp`: additionally register the resident `rivet mcp serve` stdio server
+ * with the host (docs/perf-mcp-design.md, Phase 4). The CLI remains the
+ * default agent interface; the flag is additive, never a replacement.
+ */
+export type HarnessInstallOptions = {
+    mcp?: boolean;
+};
 /**
  * A single agent harness Rivet can install into (Claude Code, Cursor, …).
  *
+ * Installing means: write the host's CLI-usage guidance (rules/skill file),
+ * write the host's user-scope command allowlist so agent invocations of
+ * `rivet` never hit an approval prompt, and clean up any MCP registration an
+ * earlier Rivet version wrote. Uninstall removes exactly what install wrote.
+ *
  * This interface is the *only* place harnesses are enumerated. `install`,
  * `uninstall`, and `update` are all driven by iterating `HARNESSES`, so adding
  * a new editor is one registry entry rather than edits across five call sites.
@@ -20,18 +36,29 @@ export interface Harness {
     id: string;
     /** Human label used in progress and summary output. */
     label: string;
-    /** Label for the in-app "Send to …" button (consumed by the MCP server). */
+    /** Label for the in-app "Send to …" button. */
     sendButtonLabel: string;
     /** Where to send a user whose harness isn't installed yet. */
     installUrl: string;
+    /**
+     * Retired targets are kept for uninstall/cleanup but skipped by the
+     * install-everywhere flow; explicit installs print why.
+     */
+    isRetired?: boolean;
+    /**
+     * True when `--mcp` can register the resident stdio server with this
+     * harness. Lets a retired harness (Claude Desktop) re-enter the
+     * install-everywhere flow for MCP-only setup.
+     */
+    supportsMcp?: boolean;
     /** True when this harness appears present on the machine. */
     detect(): boolean;
     /** Message shown when a user explicitly targets a harness that isn't present. */
     notInstalledMessage(): string;
-    install(): InstallOutcome;
+    install(options?: HarnessInstallOptions): InstallOutcome;
     /** Returns whether anything was actually removed. */
     uninstall(): boolean;
-    /** Re-register only if already installed. Returns whether it updated. */
+    /** Refresh guidance/allowlists only if already installed. Returns whether it updated. */
     update(): boolean;
     /** Multi-line "Next steps" block printed after a single-target install. */
     nextSteps: string;
@@ -40,26 +67,9 @@ export interface Harness {
     /** Harness-specific guidance printed after a single-target uninstall changed something. */
     restartHint: string;
 }
-/**
- * Resolve `npx` to an absolute path using the install-time shell PATH.
- *
- * Why: editors like Claude desktop inherit a sanitized PATH at launch that can
- * put stale node versions first, causing `npx` to dispatch to a node so old it
- * can't even `require('node:url')`. Writing the absolute path into the MCP
- * config bypasses that lookup. Falls back to literal "npx" with a warning so
- * install never hard-blocks on a quirky environment.
- */
-export declare const resolveNpxCommand: () => string;
-export declare const buildCursorHostedRivetEntry: () => {
-    url: string;
-};
-export declare const buildCursorLocalRivetEntry: () => {
-    command: string;
-    args: string[];
-};
 export declare const HARNESSES: Harness[];
 export declare const findHarness: (id: string) => Harness | undefined;
-export declare const detectedHarnesses: () => Harness[];
+export declare const detectedHarnesses: (options?: HarnessInstallOptions) => Harness[];
 /** Label for the in-app "Send to …" button, by harness id. */
 export declare const sendButtonLabelFor: (id?: string) => string;
 /**
@@ -67,7 +77,7 @@ export declare const sendButtonLabelFor: (id?: string) => string;
  * (`target` undefined/`'all'`). Returns a process exit code; never exits
  * itself so the multi-install loop survives a single failure.
  */
-export declare const installHarnesses: (target?: string) => {
+export declare const installHarnesses: (target?: string, options?: HarnessInstallOptions) => {
     exitCode: number;
 };
 /**
@@ -77,6 +87,7 @@ export declare const installHarnesses: (target?: string) => {
 export declare const uninstallHarnesses: (target?: string) => {
     exitCode: number;
 };
-/** Re-register Rivet for every detected, already-installed harness. */
+/** Refresh guidance/allowlists for every detected, already-installed harness. */
 export declare const updateHarnesses: () => void;
+export { verifyCodexRules };
 //# sourceMappingURL=harnesses.d.ts.map

package/dist/install/harnesses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harnesses.d.ts","sourceRoot":"","sources":["../../src/install/harnesses.ts"],"names":[],"mappings":"AAOA;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,eAAe,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,MAAM,IAAI,OAAO,CAAC;IAClB,iFAAiF;IACjF,mBAAmB,IAAI,MAAM,CAAC;IAC9B,OAAO,IAAI,cAAc,CAAC;IAC1B,qDAAqD;IACrD,SAAS,IAAI,OAAO,CAAC;IACrB,yEAAyE;IACzE,MAAM,IAAI,OAAO,CAAC;IAClB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,QAAO,MA4BpC,CAAC;AAiIF,eAAO,MAAM,2BAA2B;;CAEtC,CAAC;AAgBH,eAAO,MAAM,0BAA0B;;;CAGrC,CAAC;AAwVH,eAAO,MAAM,SAAS,EAAE,OAAO,EAiF9B,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,IAAI,MAAM,KAAG,OAAO,GAAG,SACf,CAAC;AAErC,eAAO,MAAM,iBAAiB,QAAO,OAAO,EACP,CAAC;AAEtC,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,KAAG,MACkB,CAAC;AAiBpE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CA0EpE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAAI,SAAS,MAAM,KAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAkCtE,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,eAAe,QAAO,IAUlC,CAAC"}
+{"version":3,"file":"harnesses.d.ts","sourceRoot":"","sources":["../../src/install/harnesses.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,gBAAgB,EAQjB,MAAM,cAAc,CAAC;AAwBtB;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,OAAO;IACtB,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6DAA6D;IAC7D,MAAM,IAAI,OAAO,CAAC;IAClB,iFAAiF;IACjF,mBAAmB,IAAI,MAAM,CAAC;IAC9B,OAAO,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,cAAc,CAAC;IACzD,qDAAqD;IACrD,SAAS,IAAI,OAAO,CAAC;IACrB,yFAAyF;IACzF,MAAM,IAAI,OAAO,CAAC;IAClB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,WAAW,EAAE,MAAM,CAAC;CACrB;AA6XD,eAAO,MAAM,SAAS,EAAE,OAAO,EAK9B,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,IAAI,MAAM,KAAG,OAAO,GAAG,SACf,CAAC;AAErC,eAAO,MAAM,iBAAiB,GAC5B,UAAU,qBAAqB,KAC9B,OAAO,EAKP,CAAC;AAEJ,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,KAAG,MACkB,CAAC;AAqBpE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAC3B,SAAS,MAAM,EACf,UAAU,qBAAqB,KAC9B;IAAE,QAAQ,EAAE,MAAM,CAAA;CA2EpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAAI,SAAS,MAAM,KAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAkCtE,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,eAAe,QAAO,IAUlC,CAAC;AAEF,OAAO,EAAE,gBAAgB,EAAE,CAAC"}