ronds_ai 0.1.13 → 0.1.17

package/lib/hooks_deploy.js

@@ -1,397 +1,605 @@
-const fs = require('fs');
-const path = require('path');
-
-const CURSOR_COMMAND = 'npx ronds_ai@latest record cursor';
-const CLAUDE_COMMAND = 'npx ronds_ai@latest record claude';
-const CODEX_COMMAND = 'npx ronds_ai@latest record codex';
-const CURSOR_OLD_COMMAND = 'node .cursor/hooks/cursor_hook_request.cjs';
-const CURSOR_OLD_JS_COMMAND = 'node .cursor/hooks/cursor_hook_request.js';
-const CLAUDE_OLD_COMMAND = 'node .claude/hooks/claude_hook_request.cjs';
-const CLAUDE_OLD_JS_COMMAND = 'node .claude/hooks/claude_hook_request.js';
-const CODEX_OLD_JS_SCRIPT = '.codex/hooks/codex_hook_request.js';
-const CLAUDE_MATCHER = 'Edit|Write|MultiEdit';
-const CURSOR_MANAGED_COMMANDS = new Set([
-  CURSOR_COMMAND,
-  CURSOR_OLD_COMMAND,
-  CURSOR_OLD_JS_COMMAND,
-]);
-const CLAUDE_MANAGED_COMMANDS = new Set([
-  CLAUDE_COMMAND,
-  CLAUDE_OLD_COMMAND,
-  CLAUDE_OLD_JS_COMMAND,
-]);
-const CODEX_MANAGED_COMMANDS = new Set([
-  CODEX_COMMAND,
-]);
-const CODEX_OLD_COMMAND_MATCHERS = [CODEX_OLD_JS_SCRIPT];
-
-function isPlainObject(value) {
-  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
-}
-
-function ensureDir(dirPath) {
-  fs.mkdirSync(dirPath, { recursive: true });
-}
-
-function readJsonFile(filePath, fallback) {
-  if (!fs.existsSync(filePath)) {
-    return { data: fallback, exists: false };
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+
+const CURSOR_COMMAND = 'npx ronds_ai@latest record cursor';
+const CLAUDE_COMMAND = 'npx ronds_ai@latest record claude';
+const CODEX_COMMAND = 'npx ronds_ai@latest record codex';
+const CURSOR_OLD_COMMAND = 'node .cursor/hooks/cursor_hook_request.cjs';
+const CURSOR_OLD_JS_COMMAND = 'node .cursor/hooks/cursor_hook_request.js';
+const CLAUDE_OLD_COMMAND = 'node .claude/hooks/claude_hook_request.cjs';
+const CLAUDE_OLD_JS_COMMAND = 'node .claude/hooks/claude_hook_request.js';
+const CLAUDE_MATCHER = 'Edit|Write|MultiEdit';
+const CODEX_HOOK_NAMES = new Set(['UserPromptSubmit', 'Stop', 'PostToolUse']);
+const CODEX_MATCHER = 'apply_patch';
+const CURSOR_MANAGED_COMMANDS = new Set([
+  CURSOR_COMMAND,
+  CURSOR_OLD_COMMAND,
+  CURSOR_OLD_JS_COMMAND,
+]);
+const CLAUDE_MANAGED_COMMANDS = new Set([
+  CLAUDE_COMMAND,
+  CLAUDE_OLD_COMMAND,
+  CLAUDE_OLD_JS_COMMAND,
+]);
+function isPlainObject(value) {
+  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+
+function ensureDir(dirPath) {
+  fs.mkdirSync(dirPath, { recursive: true });
+}
+
+function readJsonFile(filePath, fallback) {
+  if (!fs.existsSync(filePath)) {
+    return { data: fallback, exists: false };
+  }
+
+  const raw = fs.readFileSync(filePath, 'utf8').trim();
+  if (!raw) {
+    return { data: fallback, exists: true };
+  }
+
+  let data;
+  try {
+    data = JSON.parse(raw);
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    throw new Error(`Invalid JSON in ${filePath}: ${detail}`);
+  }
+
+  if (!isPlainObject(data)) {
+    throw new Error(`Expected top-level object in ${filePath}`);
+  }
+
+  return { data, exists: true };
+}
+
+function writeJsonFile(filePath, data) {
+  const nextContent = `${JSON.stringify(data, null, 2)}\n`;
+  if (fs.existsSync(filePath)) {
+    const currentContent = fs.readFileSync(filePath, 'utf8');
+    if (currentContent === nextContent) {
+      return false;
+    }
+  }
+
+  ensureDir(path.dirname(filePath));
+  fs.writeFileSync(filePath, nextContent, 'utf8');
+  return true;
+}
+
+function writeTextFileIfChanged(filePath, nextContent) {
+  if (fs.existsSync(filePath)) {
+    const currentContent = fs.readFileSync(filePath, 'utf8');
+    if (currentContent === nextContent) {
+      return false;
+    }
+  }
+
+  ensureDir(path.dirname(filePath));
+  fs.writeFileSync(filePath, nextContent, 'utf8');
+  return true;
+}
+
+function removeFileIfExists(filePath, removedFiles) {
+  if (!fs.existsSync(filePath)) {
+    return;
+  }
+
+  fs.rmSync(filePath, { force: true });
+  removedFiles.push(filePath);
+}
+
+function removeKnownCommands(entries, commands) {
+  const input = Array.isArray(entries) ? entries : [];
+  return input.filter((entry) => {
+    return !(isPlainObject(entry) && entry.type === 'command' && commands.has(entry.command));
+  });
+}
+
+function ensureCursorHook(config) {
+  const next = isPlainObject(config) ? { ...config } : {};
+  const hooks = isPlainObject(next.hooks) ? { ...next.hooks } : {};
+  const afterFileEdit = Array.isArray(hooks.afterFileEdit) ? hooks.afterFileEdit.slice() : [];
+  const filtered = removeKnownCommands(afterFileEdit, CURSOR_MANAGED_COMMANDS);
+
+  filtered.push({
+    type: 'command',
+    command: CURSOR_COMMAND,
+  });
+
+  hooks.afterFileEdit = filtered;
+  next.version = next.version === undefined ? 1 : next.version;
+  next.hooks = hooks;
+  return next;
+}
+
+function splitClaudeHooks(hooksConfig) {
+  const nextHooks = isPlainObject(hooksConfig) ? { ...hooksConfig } : {};
+  const postToolUse = Array.isArray(nextHooks.PostToolUse) ? nextHooks.PostToolUse : [];
+  const keepEntries = [];
+  const desiredHooks = [];
+
+  for (const entry of postToolUse) {
+    if (!isPlainObject(entry)) {
+      keepEntries.push(entry);
+      continue;
+    }
+
+    if (entry.matcher !== CLAUDE_MATCHER) {
+      keepEntries.push(entry);
+      continue;
+    }
+
+    const existingHooks = Array.isArray(entry.hooks) ? entry.hooks : [];
+    for (const hook of existingHooks) {
+      if (!(isPlainObject(hook) && hook.type === 'command' && CLAUDE_MANAGED_COMMANDS.has(hook.command))) {
+        desiredHooks.push(hook);
+      }
+    }
+  }
+
+  desiredHooks.push({
+    type: 'command',
+    command: CLAUDE_COMMAND,
+  });
+
+  return {
+    withoutManagedHook: keepEntries,
+    desiredEntry: {
+      matcher: CLAUDE_MATCHER,
+      hooks: desiredHooks,
+    },
+  };
+}
+
+function ensureClaudeSettings(config) {
+  const next = isPlainObject(config) ? { ...config } : {};
+  const hooks = isPlainObject(next.hooks) ? { ...next.hooks } : {};
+  const { withoutManagedHook, desiredEntry } = splitClaudeHooks(hooks);
+
+  hooks.PostToolUse = withoutManagedHook.concat([desiredEntry]);
+  next.hooks = hooks;
+  return next;
+}
+
+function removeClaudeHookFromConfig(config) {
+  const next = isPlainObject(config) ? { ...config } : {};
+  if (!isPlainObject(next.hooks)) {
+    return next;
+  }
+
+  const hooks = { ...next.hooks };
+  const postToolUse = Array.isArray(hooks.PostToolUse) ? hooks.PostToolUse : [];
+  const cleaned = [];
+
+  for (const entry of postToolUse) {
+    if (!isPlainObject(entry)) {
+      cleaned.push(entry);
+      continue;
+    }
+
+    if (entry.matcher !== CLAUDE_MATCHER) {
+      cleaned.push(entry);
+      continue;
+    }
+
+    const existingHooks = Array.isArray(entry.hooks) ? entry.hooks : [];
+    const filteredHooks = removeKnownCommands(existingHooks, CLAUDE_MANAGED_COMMANDS);
+
+    if (filteredHooks.length > 0) {
+      cleaned.push({
+        ...entry,
+        hooks: filteredHooks,
+      });
+    }
+  }
+
+  if (cleaned.length > 0) {
+    hooks.PostToolUse = cleaned;
+  } else {
+    delete hooks.PostToolUse;
+  }
+
+  if (Object.keys(hooks).length > 0) {
+    next.hooks = hooks;
+  } else {
+    delete next.hooks;
+  }
+
+  return next;
+}
+
+function ensureCodexHooksFeatureFlag(toml) {
+  const newline = toml.includes('\r\n') ? '\r\n' : '\n';
+  const desiredLine = `hooks = true${newline}`;
+  const desiredSection = `[features]${newline}${desiredLine}`;
+
+  if (!toml.trim()) {
+    return desiredSection;
+  }
+
+  const featuresHeaderPattern = /^[ \t]*\[features\][ \t]*(?:#.*)?$/m;
+  const featuresHeaderMatch = featuresHeaderPattern.exec(toml);
+  if (!featuresHeaderMatch) {
+    const trimmed = toml.replace(/[ \t\r\n]*$/, '');
+    return `${trimmed}${newline}${newline}${desiredSection}`;
+  }
+
+  const headerStart = featuresHeaderMatch.index;
+  const headerEnd = headerStart + featuresHeaderMatch[0].length;
+  const sectionAfterHeaderStart = toml.indexOf('\n', headerEnd) === -1
+    ? toml.length
+    : toml.indexOf('\n', headerEnd) + 1;
+  const afterHeader = toml.slice(sectionAfterHeaderStart);
+  const nextHeaderMatch = /^[ \t]*\[[^\]]+\][ \t]*(?:#.*)?$/m.exec(afterHeader);
+  const sectionEnd = nextHeaderMatch
+    ? sectionAfterHeaderStart + nextHeaderMatch.index
+    : toml.length;
+  const section = toml.slice(headerStart, sectionEnd);
+  const flagPattern = /^([ \t]*hooks[ \t]*=[ \t]*)(true|false)([ \t]*(?:#.*)?$)/m;
+  const flagMatch = flagPattern.exec(section);
+
+  if (flagMatch) {
+    if (flagMatch[2] === 'true') {
+      return toml;
+    }
+
+    const nextSection = section.replace(flagPattern, '$1true$3');
+    return `${toml.slice(0, headerStart)}${nextSection}${toml.slice(sectionEnd)}`;
+  }
+
+  return `${toml.slice(0, sectionAfterHeaderStart)}${desiredLine}${toml.slice(sectionAfterHeaderStart)}`;
+}
+
+function ensureCodexManagedDir(toml, reqPath) {
+  const newline = toml.includes('\r\n') ? '\r\n' : '\n';
+  const codexDir = path.dirname(path.resolve(reqPath));
+  const managedDirLine = 'managed_dir = "~/.codex/"';
+  const winManagedDirLine = `windows_managed_dir = '${codexDir}'`;
+  const desiredLines = `${managedDirLine}${newline}${winManagedDirLine}${newline}`;
+  const desiredSection = `[hooks]${newline}${desiredLines}`;
+
+  if (!toml.trim()) {
+    return desiredSection;
+  }
+
+  const hooksHeaderPattern = /^[ \t]*\[hooks\][ \t]*(?:#.*)?$/m;
+  const hooksHeaderMatch = hooksHeaderPattern.exec(toml);
+
+  if (!hooksHeaderMatch) {
+    const trimmed = toml.replace(/[ \t\r\n]*$/, '');
+    return `${trimmed}${newline}${newline}${desiredSection}`;
+  }
+
+  const headerStart = hooksHeaderMatch.index;
+  const headerEnd = headerStart + hooksHeaderMatch[0].length;
+  const sectionAfterHeaderStart = toml.indexOf('\n', headerEnd) === -1
+    ? toml.length
+    : toml.indexOf('\n', headerEnd) + 1;
+  const afterHeader = toml.slice(sectionAfterHeaderStart);
+  const nextHeaderMatch = /^[ \t]*\[[^\]]+\][ \t]*(?:#.*)?$/m.exec(afterHeader);
+  const sectionEnd = nextHeaderMatch
+    ? sectionAfterHeaderStart + nextHeaderMatch.index
+    : toml.length;
+
+  let section = toml.slice(headerStart, sectionEnd);
+
+  const managedDirPattern = /^([ \t]*managed_dir[ \t]*=[ \t]*).*$/m;
+  if (managedDirPattern.test(section)) {
+    section = section.replace(managedDirPattern, `$1"~/.codex/"`);
+  } else {
+    section = section.replace(/(\[hooks\][^\n]*\n)/, `$1${managedDirLine}${newline}`);
+  }
+
+  const winManagedDirPattern = /^([ \t]*windows_managed_dir[ \t]*=[ \t]*).*$/m;
+  if (winManagedDirPattern.test(section)) {
+    section = section.replace(winManagedDirPattern, (_, prefix) => `${prefix}'${codexDir}'`);
+  } else {
+    section = section.replace(
+      new RegExp(`(${managedDirLine.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}[^\\n]*\\n)`),
+      `$1${winManagedDirLine}${newline}`,
+    );
+  }
+
+  return `${toml.slice(0, headerStart)}${section}${toml.slice(sectionEnd)}`;
+}
+
+// 清理 Codex requirements.toml 中由本工具管理的 hook command，保留同一 hook 下的用户自定义命令。
+function removeRondsBlocksFromToml(content) {
+  const newline = content.includes('\r\n') ? '\r\n' : '\n';
+  const lines = content.split(/\r?\n/);
+  let i = 0;
+  const result = [];
+
+  while (i < lines.length) {
+    const entryMatch = /^\[\[hooks\.([^\]]+)\]\]/.exec(lines[i]);
+
+    if (!entryMatch || !CODEX_HOOK_NAMES.has(entryMatch[1])) {
+      result.push(lines[i]);
+      i += 1;
+      continue;
+    }
+
+    const blockStart = i;
+    i += 1;
+
+    while (i < lines.length) {
+      const sectionMatch = /^\[+([^\]]+)\]/.exec(lines[i]);
+      if (sectionMatch) {
+        const header = sectionMatch[1];
+        const isSubSection = header.startsWith(`hooks.${entryMatch[1]}.`);
+        if (!isSubSection) {
+          break;
+        }
+      }
+      i += 1;
+    }
+
+    const cleanedBlock = removeRondsCommandsFromTomlHookBlock(lines.slice(blockStart, i), entryMatch[1]);
+    for (const line of cleanedBlock) {
+      result.push(line);
+    }
+  }
+
+  let output = result.join(newline);
+  if (content.endsWith('\n') && !output.endsWith('\n')) {
+    output += newline;
+  }
+  return output;
+}
+
+// 判断 TOML command 行是否精确匹配本工具管理的 Codex 采集命令。
+function isCodexManagedCommandLine(line) {
+  const escapedCommand = CODEX_COMMAND.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+  const commandPattern = new RegExp(`^[ \\t]*command[ \\t]*=[ \\t]*(["'])${escapedCommand}\\1[ \\t]*(?:#.*)?$`);
+  return commandPattern.test(line);
+}
+
+// 判断父级 hook block 是否只包含本工具生成的 matcher，便于安全删除空壳 block。
+function isGeneratedCodexParentBlock(parentLines, hookName) {
+  return parentLines.every((line, index) => {
+    if (index === 0) {
+      return line === `[[hooks.${hookName}]]`;
+    }
+
+    if (/^[ \t]*$/.test(line)) {
+      return true;
+    }
+
+    if (hookName === 'PostToolUse') {
+      return new RegExp(`^[ \\t]*matcher[ \\t]*=[ \\t]*(["'])${CODEX_MATCHER}\\1[ \\t]*(?:#.*)?$`).test(line);
+    }
+
+    return /^[ \t]*matcher[ \t]*=[ \t]*["'][ \t]*["'][ \t]*(?:#.*)?$/.test(line);
+  });
+}
+
+// 从单个 Codex hook 父 block 中仅移除本工具管理的子 command block。
+function removeRondsCommandsFromTomlHookBlock(blockLines, hookName) {
+  const childHeaderPattern = new RegExp(`^\\[\\[hooks\\.${hookName}\\.hooks\\]\\]`);
+  const parentLines = [];
+  const childBlocks = [];
+  let i = 0;
+
+  while (i < blockLines.length) {
+    if (childHeaderPattern.test(blockLines[i])) {
+      const childStart = i;
+      i += 1;
+
+      while (i < blockLines.length && !/^\[+([^\]]+)\]/.test(blockLines[i])) {
+        i += 1;
+      }
+
+      childBlocks.push(blockLines.slice(childStart, i));
+      continue;
+    }
+
+    parentLines.push(blockLines[i]);
+    i += 1;
+  }
+
+  const keptChildren = childBlocks.filter((childBlock) => {
+    return !childBlock.some((line) => isCodexManagedCommandLine(line));
+  });
+
+  if (keptChildren.length === 0 && childBlocks.length !== keptChildren.length && isGeneratedCodexParentBlock(parentLines, hookName)) {
+    return [];
+  }
+
+  return parentLines.concat(...keptChildren);
+}
+
+function generateRondsHookBlocks(newline) {
+  return [
+    '',
+    '[[hooks.PostToolUse]]',
+    `matcher = "${CODEX_MATCHER}"`,
+    '',
+    '[[hooks.PostToolUse.hooks]]',
+    'type = "command"',
+    `command = "${CODEX_COMMAND}"`,
+    '',
+  ].join(newline);
+}
+
+function ensureCodexRequirementsToml(reqPath) {
+  const exists = fs.existsSync(reqPath);
+  let content = exists ? fs.readFileSync(reqPath, 'utf8') : '';
+  if (content.charCodeAt(0) === 0xFEFF) {
+    content = content.slice(1);
   }
-
-  const raw = fs.readFileSync(filePath, 'utf8').trim();
-  if (!raw) {
-    return { data: fallback, exists: true };
-  }
-
-  let data;
-  try {
-    data = JSON.parse(raw);
-  } catch (error) {
-    const detail = error instanceof Error ? error.message : String(error);
-    throw new Error(`Invalid JSON in ${filePath}: ${detail}`);
-  }
-
-  if (!isPlainObject(data)) {
-    throw new Error(`Expected top-level object in ${filePath}`);
-  }
-
-  return { data, exists: true };
-}
-
-function writeJsonFile(filePath, data) {
-  const nextContent = `${JSON.stringify(data, null, 2)}\n`;
-  if (fs.existsSync(filePath)) {
-    const currentContent = fs.readFileSync(filePath, 'utf8');
-    if (currentContent === nextContent) {
-      return false;
-    }
-  }
-
-  ensureDir(path.dirname(filePath));
-  fs.writeFileSync(filePath, nextContent, 'utf8');
-  return true;
-}
-
-function writeTextFileIfChanged(filePath, nextContent) {
-  if (fs.existsSync(filePath)) {
-    const currentContent = fs.readFileSync(filePath, 'utf8');
-    if (currentContent === nextContent) {
-      return false;
-    }
-  }
-
-  ensureDir(path.dirname(filePath));
-  fs.writeFileSync(filePath, nextContent, 'utf8');
-  return true;
-}
-
-function removeFileIfExists(filePath, removedFiles) {
-  if (!fs.existsSync(filePath)) {
-    return;
-  }
-
-  fs.rmSync(filePath, { force: true });
-  removedFiles.push(filePath);
-}
-
-function removeKnownCommands(entries, commands) {
-  const input = Array.isArray(entries) ? entries : [];
-  return input.filter((entry) => {
-    return !(isPlainObject(entry) && entry.type === 'command' && commands.has(entry.command));
-  });
-}
-
-function removeCommandEntriesByMatcher(entries, matchers) {
-  const input = Array.isArray(entries) ? entries : [];
-  return input.filter((entry) => {
-    if (!(isPlainObject(entry) && entry.type === 'command' && typeof entry.command === 'string')) {
-      return true;
-    }
-
-    return !matchers.some((matcher) => entry.command.includes(matcher));
-  });
-}
-
-function ensureCursorHook(config) {
-  const next = isPlainObject(config) ? { ...config } : {};
-  const hooks = isPlainObject(next.hooks) ? { ...next.hooks } : {};
-  const afterFileEdit = Array.isArray(hooks.afterFileEdit) ? hooks.afterFileEdit.slice() : [];
-  const filtered = removeKnownCommands(afterFileEdit, CURSOR_MANAGED_COMMANDS);
-
-  filtered.push({
-    type: 'command',
-    command: CURSOR_COMMAND,
-  });
-
-  hooks.afterFileEdit = filtered;
-  next.version = next.version === undefined ? 1 : next.version;
-  next.hooks = hooks;
-  return next;
-}
-
-function splitClaudeHooks(hooksConfig) {
-  const nextHooks = isPlainObject(hooksConfig) ? { ...hooksConfig } : {};
-  const postToolUse = Array.isArray(nextHooks.PostToolUse) ? nextHooks.PostToolUse : [];
-  const keepEntries = [];
-  const desiredHooks = [];
-
-  for (const entry of postToolUse) {
-    if (!isPlainObject(entry)) {
-      keepEntries.push(entry);
-      continue;
-    }
-
-    if (entry.matcher !== CLAUDE_MATCHER) {
-      keepEntries.push(entry);
-      continue;
-    }
-
-    const existingHooks = Array.isArray(entry.hooks) ? entry.hooks : [];
-    for (const hook of existingHooks) {
-      if (!(isPlainObject(hook) && hook.type === 'command' && CLAUDE_MANAGED_COMMANDS.has(hook.command))) {
-        desiredHooks.push(hook);
-      }
-    }
-  }
-
-  desiredHooks.push({
-    type: 'command',
-    command: CLAUDE_COMMAND,
-  });
-
-  return {
-    withoutManagedHook: keepEntries,
-    desiredEntry: {
-      matcher: CLAUDE_MATCHER,
-      hooks: desiredHooks,
-    },
-  };
-}
-
-function ensureClaudeSettings(config) {
-  const next = isPlainObject(config) ? { ...config } : {};
-  const hooks = isPlainObject(next.hooks) ? { ...next.hooks } : {};
-  const { withoutManagedHook, desiredEntry } = splitClaudeHooks(hooks);
-
-  hooks.PostToolUse = withoutManagedHook.concat([desiredEntry]);
-  next.hooks = hooks;
-  return next;
-}
-
-function removeClaudeHookFromConfig(config) {
-  const next = isPlainObject(config) ? { ...config } : {};
-  if (!isPlainObject(next.hooks)) {
-    return next;
-  }
-
-  const hooks = { ...next.hooks };
-  const postToolUse = Array.isArray(hooks.PostToolUse) ? hooks.PostToolUse : [];
-  const cleaned = [];
-
-  for (const entry of postToolUse) {
-    if (!isPlainObject(entry)) {
-      cleaned.push(entry);
-      continue;
-    }
-
-    if (entry.matcher !== CLAUDE_MATCHER) {
-      cleaned.push(entry);
-      continue;
-    }
-
-    const existingHooks = Array.isArray(entry.hooks) ? entry.hooks : [];
-    const filteredHooks = removeKnownCommands(existingHooks, CLAUDE_MANAGED_COMMANDS);
-
-    if (filteredHooks.length > 0) {
-      cleaned.push({
-        ...entry,
-        hooks: filteredHooks,
-      });
-    }
-  }
-
-  if (cleaned.length > 0) {
-    hooks.PostToolUse = cleaned;
-  } else {
-    delete hooks.PostToolUse;
-  }
-
-  if (Object.keys(hooks).length > 0) {
-    next.hooks = hooks;
-  } else {
-    delete next.hooks;
-  }
-
-  return next;
-}
-
-function cleanupCodexManagedHooks(hooks) {
-  const withoutManagedCommands = removeKnownCommands(hooks, CODEX_MANAGED_COMMANDS);
-  return removeCommandEntriesByMatcher(withoutManagedCommands, CODEX_OLD_COMMAND_MATCHERS);
-}
-
-function ensureCodexHooksFeatureFlag(toml) {
-  const newline = toml.includes('\r\n') ? '\r\n' : '\n';
-  const desiredLine = `codex_hooks = true${newline}`;
-  const desiredSection = `[features]${newline}${desiredLine}`;
-
-  if (!toml.trim()) {
-    return desiredSection;
-  }
-
-  const featuresHeaderPattern = /^[ \t]*\[features\][ \t]*(?:#.*)?$/m;
-  const featuresHeaderMatch = featuresHeaderPattern.exec(toml);
-  if (!featuresHeaderMatch) {
-    const trimmed = toml.replace(/[ \t\r\n]*$/, '');
-    return `${trimmed}${newline}${newline}${desiredSection}`;
-  }
-
-  const headerStart = featuresHeaderMatch.index;
-  const headerEnd = headerStart + featuresHeaderMatch[0].length;
-  const sectionAfterHeaderStart = toml.indexOf('\n', headerEnd) === -1
-    ? toml.length
-    : toml.indexOf('\n', headerEnd) + 1;
-  const afterHeader = toml.slice(sectionAfterHeaderStart);
-  const nextHeaderMatch = /^[ \t]*\[[^\]]+\][ \t]*(?:#.*)?$/m.exec(afterHeader);
-  const sectionEnd = nextHeaderMatch
-    ? sectionAfterHeaderStart + nextHeaderMatch.index
-    : toml.length;
-  const section = toml.slice(headerStart, sectionEnd);
-  const flagPattern = /^([ \t]*codex_hooks[ \t]*=[ \t]*)(true|false)([ \t]*(?:#.*)?$)/m;
-  const flagMatch = flagPattern.exec(section);
-
-  if (flagMatch) {
-    if (flagMatch[2] === 'true') {
-      return toml;
-    }
-
-    const nextSection = section.replace(flagPattern, '$1true$3');
-    return `${toml.slice(0, headerStart)}${nextSection}${toml.slice(sectionEnd)}`;
-  }
-
-  return `${toml.slice(0, sectionAfterHeaderStart)}${desiredLine}${toml.slice(sectionAfterHeaderStart)}`;
-}
-
-function ensureCodexConfigToml(configPath) {
-  const exists = fs.existsSync(configPath);
-  const currentContent = exists ? fs.readFileSync(configPath, 'utf8') : '';
-  const nextContent = ensureCodexHooksFeatureFlag(currentContent);
-  const changed = writeTextFileIfChanged(configPath, nextContent);
-
-  return { exists, changed };
-}
-
-function ensureCodexHook(config) {
-  const next = isPlainObject(config) ? { ...config } : {};
-  const hooks = isPlainObject(next.hooks) ? { ...next.hooks } : {};
-
-  for (const hookName of ['UserPromptSubmit', 'Stop']) {
-    const entries = Array.isArray(hooks[hookName]) ? hooks[hookName].slice() : [];
-    const normalizedEntries = [];
-
-    for (const entry of entries) {
-      if (!isPlainObject(entry)) {
-        normalizedEntries.push(entry);
-        continue;
-      }
-
-      const innerHooks = Array.isArray(entry.hooks) ? entry.hooks : [];
-      const filteredHooks = cleanupCodexManagedHooks(innerHooks);
-      if (filteredHooks.length > 0) {
-        normalizedEntries.push({
-          ...entry,
-          hooks: filteredHooks,
-        });
-      } else if (!Array.isArray(entry.hooks)) {
-        normalizedEntries.push(entry);
-      }
-    }
-
-    normalizedEntries.push({
-      hooks: [
-        {
-          type: 'command',
-          command: CODEX_COMMAND,
-        },
-      ],
-    });
-
-    hooks[hookName] = normalizedEntries;
-  }
-
-  next.hooks = hooks;
-  return next;
-}
-
-function deployHooks(targetDir = process.cwd()) {
-  const baseDir = path.resolve(targetDir);
-  const removedFiles = [];
-  const updatedFiles = [];
-  const createdFiles = [];
-
-  removeFileIfExists(path.join(baseDir, '.cursor', 'hooks', 'cursor_hook_request.cjs'), removedFiles);
-  removeFileIfExists(path.join(baseDir, '.cursor', 'hooks', 'cursor_hook_request.js'), removedFiles);
-  removeFileIfExists(path.join(baseDir, '.claude', 'hooks', 'claude_hook_request.cjs'), removedFiles);
-  removeFileIfExists(path.join(baseDir, '.claude', 'hooks', 'claude_hook_request.js'), removedFiles);
-  removeFileIfExists(path.join(baseDir, '.claude', 'hooks', 'claide_hook_request.cjs'), removedFiles);
-  removeFileIfExists(path.join(baseDir, '.claude', 'hooks', 'claide_hook_request.js'), removedFiles);
-  removeFileIfExists(path.join(baseDir, '.codex', 'hooks', 'codex_hook_request.js'), removedFiles);
-  removeFileIfExists(path.join(baseDir, '.codex', 'hooks', 'codex_hook_request.cjs'), removedFiles);
-  removeFileIfExists(path.join(baseDir, '.codex', 'hooks', 'codex_hook_request.mjs'), removedFiles);
-
-  const cursorPath = path.join(baseDir, '.cursor', 'hooks.json');
-  const cursorResult = readJsonFile(cursorPath, {});
-  const nextCursor = ensureCursorHook(cursorResult.data);
-  if (writeJsonFile(cursorPath, nextCursor)) {
-    (cursorResult.exists ? updatedFiles : createdFiles).push(cursorPath);
-  }
-
-  const claudeSettingsPath = path.join(baseDir, '.claude', 'settings.json');
-  const claudeSettingsResult = readJsonFile(claudeSettingsPath, {});
-  const nextClaudeSettings = ensureClaudeSettings(claudeSettingsResult.data);
-  if (writeJsonFile(claudeSettingsPath, nextClaudeSettings)) {
-    (claudeSettingsResult.exists ? updatedFiles : createdFiles).push(claudeSettingsPath);
-  }
-
-  const codexDir = path.join(baseDir, '.codex');
-  const codexHooksPath = path.join(codexDir, 'hooks.json');
-  const codexHooksResult = readJsonFile(codexHooksPath, {});
-  const nextCodexHooks = ensureCodexHook(codexHooksResult.data);
-  if (writeJsonFile(codexHooksPath, nextCodexHooks)) {
-    (codexHooksResult.exists ? updatedFiles : createdFiles).push(codexHooksPath);
-  }
-
-  const codexConfigPath = path.join(codexDir, 'config.toml');
-  const codexConfigResult = ensureCodexConfigToml(codexConfigPath);
-  if (codexConfigResult.changed) {
-    (codexConfigResult.exists ? updatedFiles : createdFiles).push(codexConfigPath);
-  }
-
-  const localCandidates = [
-    path.join(baseDir, '.claude', 'settings.local.json'),
-    path.join(baseDir, '.claude', 'setting.local.json'),
-  ];
-
-  for (const localPath of localCandidates) {
-    if (!fs.existsSync(localPath)) {
-      continue;
-    }
-
-    const localResult = readJsonFile(localPath, {});
-    const nextLocal = removeClaudeHookFromConfig(localResult.data);
-    if (writeJsonFile(localPath, nextLocal)) {
-      updatedFiles.push(localPath);
-    }
-  }
-
-  return {
-    targetDir: baseDir,
-    removedFiles,
-    updatedFiles,
-    createdFiles,
-  };
-}
-
-module.exports = {
-  deployHooks,
-};
+  const newline = content.includes('\r\n') ? '\r\n' : '\n';
+
+  content = ensureCodexHooksFeatureFlag(content);
+  content = ensureCodexManagedDir(content, reqPath);
+  content = removeRondsBlocksFromToml(content);
+  content = content.replace(/[\t ]*\r?\n*$/, newline);
+  content += generateRondsHookBlocks(newline);
+
+  const changed = writeTextFileIfChanged(reqPath, content);
+  return { exists, changed };
+}
+
+function normalizeDeployScope(scope) {
+  const normalizedScope = String(scope || 'project').trim().toLowerCase();
+  if (normalizedScope !== 'project' && normalizedScope !== 'user') {
+    throw new Error(`Unsupported hooks deploy scope: ${scope || ''}`);
+  }
+
+  return normalizedScope;
+}
+
+function resolveDeployPaths(targetDir, scope) {
+  const baseDir = path.resolve(targetDir);
+  const configRoot = scope === 'user' ? os.homedir() : baseDir;
+
+  return {
+    targetDir: baseDir,
+    configRoot,
+    cursorHooksPath: path.join(configRoot, '.cursor', 'hooks.json'),
+    claudeSettingsPath: path.join(configRoot, '.claude', 'settings.json'),
+    claudeLocalCandidates: [
+      path.join(baseDir, '.claude', 'settings.local.json'),
+      path.join(baseDir, '.claude', 'setting.local.json'),
+    ],
+    codexRequirementsPath: process.platform === 'win32'
+      ? 'C:\\ProgramData\\OpenAI\\Codex\\requirements.toml'
+      : '/etc/codex/requirements.toml',
+  };
+}
+
+function recordWriteResult(filePath, existed, changed, result) {
+  if (!changed) {
+    return;
+  }
+
+  (existed ? result.updatedFiles : result.createdFiles).push(filePath);
+}
+
+// 按工具范围清理旧版脚本，避免 --tool 过滤时误删其他工具仍在使用的 hook 脚本。
+function cleanupLegacyHookScripts(configRoot, result, tool) {
+  if (!tool || tool === 'cursor') {
+    removeFileIfExists(path.join(configRoot, '.cursor', 'hooks', 'cursor_hook_request.cjs'), result.removedFiles);
+    removeFileIfExists(path.join(configRoot, '.cursor', 'hooks', 'cursor_hook_request.js'), result.removedFiles);
+  }
+
+  if (!tool || tool === 'claude') {
+    removeFileIfExists(path.join(configRoot, '.claude', 'hooks', 'claude_hook_request.cjs'), result.removedFiles);
+    removeFileIfExists(path.join(configRoot, '.claude', 'hooks', 'claude_hook_request.js'), result.removedFiles);
+    removeFileIfExists(path.join(configRoot, '.claude', 'hooks', 'claide_hook_request.cjs'), result.removedFiles);
+    removeFileIfExists(path.join(configRoot, '.claude', 'hooks', 'claide_hook_request.js'), result.removedFiles);
+  }
+
+  if (!tool || tool === 'codex') {
+    removeFileIfExists(path.join(configRoot, '.codex', 'hooks', 'codex_hook_request.js'), result.removedFiles);
+    removeFileIfExists(path.join(configRoot, '.codex', 'hooks', 'codex_hook_request.cjs'), result.removedFiles);
+    removeFileIfExists(path.join(configRoot, '.codex', 'hooks', 'codex_hook_request.mjs'), result.removedFiles);
+  }
+}
+
+function deployCursorHook(cursorPath, result) {
+  const cursorResult = readJsonFile(cursorPath, {});
+  const nextCursor = ensureCursorHook(cursorResult.data);
+  const changed = writeJsonFile(cursorPath, nextCursor);
+  recordWriteResult(cursorPath, cursorResult.exists, changed, result);
+}
+
+function deployClaudeSettings(claudeSettingsPath, result) {
+  const claudeSettingsResult = readJsonFile(claudeSettingsPath, {});
+  const nextClaudeSettings = ensureClaudeSettings(claudeSettingsResult.data);
+  const changed = writeJsonFile(claudeSettingsPath, nextClaudeSettings);
+  recordWriteResult(claudeSettingsPath, claudeSettingsResult.exists, changed, result);
+}
+
+function cleanupClaudeLocalSettings(localCandidates, result) {
+  for (const localPath of localCandidates) {
+    if (!fs.existsSync(localPath)) {
+      continue;
+    }
+
+    const localResult = readJsonFile(localPath, {});
+    const nextLocal = removeClaudeHookFromConfig(localResult.data);
+    if (writeJsonFile(localPath, nextLocal)) {
+      result.updatedFiles.push(localPath);
+    }
+  }
+}
+
+// 将系统级 Codex requirements.toml 的权限错误转换成面向用户的部署提示。
+function wrapCodexPermissionError(error, codexRequirementsPath) {
+  const code = isPlainObject(error) ? error.code : '';
+  if (code !== 'EACCES' && code !== 'EPERM') {
+    return error;
+  }
+
+  const wrapped = new Error(
+    `Codex 部署需要管理员/root 权限，无法写入 ${codexRequirementsPath}。请以管理员身份重新运行 hooks deploy --scope user。`,
+  );
+  wrapped.cause = error;
+  wrapped.code = code;
+  return wrapped;
+}
+
+function deployCodexUserHooks(codexRequirementsPath, result) {
+  try {
+    const reqResult = ensureCodexRequirementsToml(codexRequirementsPath);
+    recordWriteResult(codexRequirementsPath, reqResult.exists, reqResult.changed, result);
+  } catch (error) {
+    throw wrapCodexPermissionError(error, codexRequirementsPath);
+  }
+}
+
+function skipCodexProjectDeploy(result) {
+  result.skipped.push({
+    tool: 'codex',
+    reason: 'Codex project-level .codex config is ignored unless the project is trusted. Use --scope user to deploy Codex hooks.',
+  });
+}
+
+function deployHooks(targetDir = process.cwd(), options = {}) {
+  const scope = normalizeDeployScope(options.scope);
+  const paths = resolveDeployPaths(targetDir, scope);
+  const result = {
+    scope,
+    targetDir: paths.targetDir,
+    configRoot: paths.configRoot,
+    removedFiles: [],
+    updatedFiles: [],
+    createdFiles: [],
+    skipped: [],
+  };
+
+  cleanupLegacyHookScripts(paths.configRoot, result, options.tool);
+
+  if (!options.tool || options.tool === 'cursor') {
+    deployCursorHook(paths.cursorHooksPath, result);
+  } else {
+    result.skipped.push({ tool: 'cursor', reason: 'Skipped by --tool filter' });
+  }
+
+  if (!options.tool || options.tool === 'claude') {
+    deployClaudeSettings(paths.claudeSettingsPath, result);
+  } else {
+    result.skipped.push({ tool: 'claude', reason: 'Skipped by --tool filter' });
+  }
+
+  if (options.tool && options.tool !== 'codex') {
+    result.skipped.push({ tool: 'codex', reason: 'Skipped by --tool filter' });
+  } else if (scope === 'user') {
+    deployCodexUserHooks(paths.codexRequirementsPath, result);
+  } else {
+    skipCodexProjectDeploy(result);
+  }
+
+  if (!options.tool || options.tool === 'claude') {
+    cleanupClaudeLocalSettings(paths.claudeLocalCandidates, result);
+  }
+
+  return result;
+}
+
+module.exports = {
+  deployHooks,
+};