rulesync 8.15.1 → 8.17.0

package/dist/{chunk-3DM6NLND.js → chunk-RXCRO26Z.js}

@@ -4826,7 +4826,9 @@ async function buildCodexConfigTomlContent({
   if (typeof configToml.features !== "object" || configToml.features === null) {
     configToml.features = {};
   }
-  configToml.features.codex_hooks = true;
+  const features = configToml.features;
+  delete features.codex_hooks;
+  features.hooks = true;
   return smolToml2.stringify(configToml);
 }
 var CodexcliConfigToml = class _CodexcliConfigToml extends ToolFile {
@@ -7608,6 +7610,16 @@ var McpServerSchema = z24.looseObject({
   tools: z24.optional(z24.array(z24.string())),
   kiroAutoApprove: z24.optional(z24.array(z24.string())),
   kiroAutoBlock: z24.optional(z24.array(z24.string())),
+  // Codex CLI-specific: list of shell env var names that codex should pass
+  // through from the user's environment to the MCP server process.
+  // Distinct from `env` (a literal name→value map): `envVars` is a list of
+  // variable NAMES whose values come from the user's shell at runtime.
+  // Only honoured by the codex generator (renamed to `env_vars` in codex
+  // TOML output, matching codex's native field name — see the
+  // `enabledTools`→`enabled_tools` precedent in `codexcli-mcp.ts`).
+  // Stripped by `RulesyncMcp.getMcpServers()` so it does not leak into
+  // other tools' configs.
+  envVars: z24.optional(z24.array(z24.string())),
   headers: z24.optional(z24.record(z24.string(), z24.string())),
   enabledTools: z24.optional(z24.array(z24.string())),
   disabledTools: z24.optional(z24.array(z24.string()))
@@ -7710,10 +7722,11 @@ var RulesyncMcp = class _RulesyncMcp extends RulesyncFile {
     });
   }
   getMcpServers() {
-    const entries = Object.entries(this.json.mcpServers);
+    const mcpServers = this.json.mcpServers ?? {};
+    const entries = Object.entries(mcpServers);
     return Object.fromEntries(
       entries.map(([serverName, serverConfig]) => {
-        return [serverName, omit(serverConfig, ["targets", "description", "exposed"])];
+        return [serverName, omit(serverConfig, ["targets", "description", "exposed", "envVars"])];
       })
     );
   }
@@ -7932,11 +7945,17 @@ var ClineMcp = class _ClineMcp extends ToolMcp {
     rulesyncMcp,
     validate = true
   }) {
+    const json = rulesyncMcp.getJson();
+    const fileContent = JSON.stringify(
+      { ...json, mcpServers: rulesyncMcp.getMcpServers() },
+      null,
+      2
+    );
     return new _ClineMcp({
       outputRoot,
       relativeDirPath: this.getSettablePaths().relativeDirPath,
       relativeFilePath: this.getSettablePaths().relativeFilePath,
-      fileContent: rulesyncMcp.getFileContent(),
+      fileContent,
       validate
     });
   }
@@ -7980,6 +7999,8 @@ function convertFromCodexFormat(codexMcp) {
         converted["enabledTools"] = value;
       } else if (key === "disabled_tools") {
         converted["disabledTools"] = value;
+      } else if (key === "env_vars") {
+        converted["envVars"] = value;
       } else {
         converted[key] = value;
       }
@@ -8001,6 +8022,8 @@ function convertToCodexFormat(mcpServers) {
         converted["enabled_tools"] = value;
       } else if (key === "disabledTools") {
         converted["disabled_tools"] = value;
+      } else if (key === "envVars") {
+        converted["env_vars"] = value;
       } else {
         converted[key] = value;
       }
@@ -8096,7 +8119,12 @@ var CodexcliMcp = class _CodexcliMcp extends ToolMcp {
     const filtered = {};
     for (const [key, value] of Object.entries(obj)) {
       if (value === null) continue;
-      if (typeof value === "object" && Object.keys(value).length === 0) continue;
+      if (typeof value === "object" && !Array.isArray(value)) {
+        const cleaned = this.removeEmptyEntries(value);
+        if (Object.keys(cleaned).length === 0) continue;
+        filtered[key] = cleaned;
+        continue;
+      }
       filtered[key] = value;
     }
     return filtered;
@@ -8473,8 +8501,7 @@ var CursorMcp = class _CursorMcp extends ToolMcp {
         { cause: error }
       );
     }
-    const rulesyncJson = rulesyncMcp.getJson();
-    const mcpServers = isMcpServers(rulesyncJson.mcpServers) ? rulesyncJson.mcpServers : {};
+    const mcpServers = rulesyncMcp.getMcpServers();
     const transformedServers = convertEnvToCursorFormat(mcpServers);
     const cursorConfig = { ...json, mcpServers: transformedServers };
     return new _CursorMcp({
@@ -8643,9 +8670,9 @@ var FactorydroidMcp = class _FactorydroidMcp extends ToolMcp {
     rulesyncMcp,
     validate = true
   }) {
-    const json = rulesyncMcp.getJson();
+    const mcpServers = rulesyncMcp.getMcpServers();
     const factorydroidConfig = {
-      mcpServers: json.mcpServers || {}
+      mcpServers
     };
     const fileContent = JSON.stringify(factorydroidConfig, null, 2);
     return new _FactorydroidMcp({
@@ -8731,7 +8758,7 @@ var GeminiCliMcp = class _GeminiCliMcp extends ToolMcp {
       JSON.stringify({ mcpServers: {} }, null, 2)
     );
     const json = JSON.parse(fileContent);
-    const newJson = { ...json, mcpServers: rulesyncMcp.getJson().mcpServers };
+    const newJson = { ...json, mcpServers: rulesyncMcp.getMcpServers() };
     return new _GeminiCliMcp({
       outputRoot,
       relativeDirPath: paths.relativeDirPath,
@@ -8812,11 +8839,17 @@ var JunieMcp = class _JunieMcp extends ToolMcp {
     rulesyncMcp,
     validate = true
   }) {
+    const json = rulesyncMcp.getJson();
+    const fileContent = JSON.stringify(
+      { ...json, mcpServers: rulesyncMcp.getMcpServers() },
+      null,
+      2
+    );
     return new _JunieMcp({
       outputRoot,
       relativeDirPath: this.getSettablePaths().relativeDirPath,
       relativeFilePath: this.getSettablePaths().relativeFilePath,
-      fileContent: rulesyncMcp.getFileContent(),
+      fileContent,
       validate
     });
   }
@@ -9596,8 +9629,7 @@ var RovodevMcp = class _RovodevMcp extends ToolMcp {
       JSON.stringify({ mcpServers: {} }, null, 2)
     );
     const json = parseRovodevMcpJson(fileContent, paths.relativeDirPath, paths.relativeFilePath);
-    const rulesyncJson = rulesyncMcp.getJson();
-    const mcpServers = isMcpServers(rulesyncJson.mcpServers) ? rulesyncJson.mcpServers : {};
+    const mcpServers = rulesyncMcp.getMcpServers();
     const rovodevConfig = { ...json, mcpServers };
     return new _RovodevMcp({
       outputRoot,
@@ -10897,10 +10929,12 @@ var ClinePermissions = class _ClinePermissions extends ToolPermissions {
 };
 
 // src/features/permissions/codexcli-permissions.ts
-import { join as join68 } from "path";
+import { isAbsolute as isAbsolute3, join as join68 } from "path";
 import * as smolToml4 from "smol-toml";
 var RULESYNC_PROFILE_NAME = "rulesync";
 var RULESYNC_BASH_RULES_FILE_NAME = "rulesync.rules";
+var CODEX_PROJECT_ROOTS_KEY = ":project_roots";
+var CODEX_GLOB_SCAN_MAX_DEPTH = 8;
 var CodexcliPermissions = class _CodexcliPermissions extends ToolPermissions {
   static getSettablePaths(_options = {}) {
     return {
@@ -11011,17 +11045,30 @@ function convertRulesyncToCodexProfile({
   logger
 }) {
   const filesystem = {};
+  const projectRootFilesystem = {};
   const domains = {};
   for (const [toolName, rules] of Object.entries(config.permission)) {
     if (toolName === "read") {
       for (const [pattern, action] of Object.entries(rules)) {
-        filesystem[pattern] = mapReadAction(action);
+        addFilesystemRule({
+          filesystem,
+          projectRootFilesystem,
+          pattern,
+          access: mapReadAction(action),
+          logger
+        });
       }
       continue;
     }
     if (toolName === "edit" || toolName === "write") {
       for (const [pattern, action] of Object.entries(rules)) {
-        filesystem[pattern] = mapWriteAction(action);
+        addFilesystemRule({
+          filesystem,
+          projectRootFilesystem,
+          pattern,
+          access: mapWriteAction(action),
+          logger
+        });
       }
       continue;
     }
@@ -11041,6 +11088,17 @@ function convertRulesyncToCodexProfile({
       `Codex CLI permissions support only read/edit/write/webfetch categories. Skipping: ${toolName}`
     );
   }
+  if (Object.keys(projectRootFilesystem).length > 0) {
+    if (typeof filesystem[CODEX_PROJECT_ROOTS_KEY] === "string") {
+      logger?.warn(
+        `"${CODEX_PROJECT_ROOTS_KEY}" is set as a direct filesystem access rule in the permissions, but it will be overwritten by project-root rules. Consider removing the direct "${CODEX_PROJECT_ROOTS_KEY}" entry.`
+      );
+    }
+    if (Object.keys(projectRootFilesystem).some((pattern) => pattern.includes("**"))) {
+      filesystem.glob_scan_max_depth = CODEX_GLOB_SCAN_MAX_DEPTH;
+    }
+    filesystem[CODEX_PROJECT_ROOTS_KEY] = projectRootFilesystem;
+  }
   return {
     ...Object.keys(filesystem).length > 0 ? { filesystem } : {},
     ...Object.keys(domains).length > 0 ? { network: { domains } } : {}
@@ -11052,13 +11110,14 @@ function convertCodexProfileToRulesync(profile) {
     permission.read = {};
     permission.edit = {};
     for (const [pattern, access] of Object.entries(profile.filesystem)) {
-      if (access === "none") {
-        permission.read[pattern] = "deny";
-        permission.edit[pattern] = "deny";
-      } else if (access === "read") {
-        permission.read[pattern] = "allow";
-      } else {
-        permission.edit[pattern] = "allow";
+      if (isCodexFilesystemAccess(access)) {
+        addRulesyncFilesystemRule(permission, pattern, access);
+        continue;
+      }
+      if (isCodexFilesystemRuleTable(access)) {
+        for (const [nestedPattern, nestedAccess] of Object.entries(access)) {
+          addRulesyncFilesystemRule(permission, nestedPattern, nestedAccess);
+        }
       }
     }
   }
@@ -11081,6 +11140,40 @@ function toCodexProfile(value) {
     ...domains ? { network: { domains } } : {}
   };
 }
+function addFilesystemRule({
+  filesystem,
+  projectRootFilesystem,
+  pattern,
+  access,
+  logger
+}) {
+  if (pattern.trim() === "") {
+    logger?.warn("Skipping empty pattern in filesystem permissions.");
+    return;
+  }
+  if (canBeCodexFilesystemRoot(pattern)) {
+    filesystem[pattern] = access;
+    return;
+  }
+  projectRootFilesystem[pattern] = access;
+}
+function canBeCodexFilesystemRoot(pattern) {
+  return isAbsolute3(pattern) || /^[A-Za-z]:[\\/]/.test(pattern) || pattern.startsWith("~/") || pattern === "~" || pattern.startsWith(":");
+}
+function addRulesyncFilesystemRule(permission, pattern, access) {
+  if (access === "none") {
+    permission.read ??= {};
+    permission.edit ??= {};
+    permission.read[pattern] = "deny";
+    permission.edit[pattern] = "deny";
+  } else if (access === "read") {
+    permission.read ??= {};
+    permission.read[pattern] = "allow";
+  } else {
+    permission.edit ??= {};
+    permission.edit[pattern] = "allow";
+  }
+}
 function toMutableTable(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     return {};
@@ -11091,8 +11184,33 @@ function toFilesystemRecord(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
   const result = {};
   for (const [key, raw] of Object.entries(value)) {
-    if (typeof raw !== "string") continue;
-    if (raw === "read" || raw === "write" || raw === "none") {
+    if (isCodexFilesystemAccess(raw)) {
+      result[key] = raw;
+      continue;
+    }
+    if (key === "glob_scan_max_depth" && typeof raw === "number") {
+      result[key] = raw;
+      continue;
+    }
+    const nested = toCodexFilesystemRuleTable(raw);
+    if (nested) {
+      result[key] = nested;
+    }
+  }
+  return Object.keys(result).length > 0 ? result : void 0;
+}
+function isCodexFilesystemAccess(value) {
+  return value === "read" || value === "write" || value === "none";
+}
+function isCodexFilesystemRuleTable(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  return Object.values(value).every(isCodexFilesystemAccess);
+}
+function toCodexFilesystemRuleTable(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const result = {};
+  for (const [key, raw] of Object.entries(value)) {
+    if (isCodexFilesystemAccess(raw)) {
       result[key] = raw;
     }
   }
@@ -13306,7 +13424,8 @@ var RulesyncSkillFrontmatterSchemaInternal = z39.looseObject({
       "allowed-tools": z39.optional(z39.array(z39.string())),
       model: z39.optional(z39.string()),
       "disable-model-invocation": z39.optional(z39.boolean()),
-      "scheduled-task": z39.optional(z39.boolean())
+      "scheduled-task": z39.optional(z39.boolean()),
+      paths: z39.optional(z39.union([z39.string(), z39.array(z39.string())]))
     })
   ),
   codexcli: z39.optional(
@@ -14081,7 +14200,8 @@ var ClaudecodeSkillFrontmatterSchema = z43.looseObject({
   description: z43.string(),
   "allowed-tools": z43.optional(z43.array(z43.string())),
   model: z43.optional(z43.string()),
-  "disable-model-invocation": z43.optional(z43.boolean())
+  "disable-model-invocation": z43.optional(z43.boolean()),
+  paths: z43.optional(z43.union([z43.string(), z43.array(z43.string())]))
 });
 var ClaudecodeSkill = class _ClaudecodeSkill extends ToolSkill {
   constructor({
@@ -14154,6 +14274,7 @@ var ClaudecodeSkill = class _ClaudecodeSkill extends ToolSkill {
       ...frontmatter["disable-model-invocation"] !== void 0 && {
         "disable-model-invocation": frontmatter["disable-model-invocation"]
       },
+      ...frontmatter.paths !== void 0 && { paths: frontmatter.paths },
       ...this.relativeDirPath === CLAUDE_SCHEDULED_TASKS_DIR_PATH && { "scheduled-task": true }
     };
     const rulesyncFrontmatter = {
@@ -14191,6 +14312,9 @@ var ClaudecodeSkill = class _ClaudecodeSkill extends ToolSkill {
       },
       ...rulesyncFrontmatter.claudecode?.["disable-model-invocation"] !== void 0 && {
         "disable-model-invocation": rulesyncFrontmatter.claudecode["disable-model-invocation"]
+      },
+      ...rulesyncFrontmatter.claudecode?.paths !== void 0 && {
+        paths: rulesyncFrontmatter.claudecode.paths
       }
     };
     const settablePaths = _ClaudecodeSkill.getSettablePaths({ global });

package/dist/cli/index.cjs

@@ -4859,7 +4859,9 @@ async function buildCodexConfigTomlContent({
   if (typeof configToml.features !== "object" || configToml.features === null) {
     configToml.features = {};
   }
-  configToml.features.codex_hooks = true;
+  const features = configToml.features;
+  delete features.codex_hooks;
+  features.hooks = true;
   return smolToml2.stringify(configToml);
 }
 var CodexcliConfigToml = class _CodexcliConfigToml extends ToolFile {
@@ -7641,6 +7643,16 @@ var McpServerSchema = import_mini24.z.looseObject({
   tools: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string())),
   kiroAutoApprove: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string())),
   kiroAutoBlock: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string())),
+  // Codex CLI-specific: list of shell env var names that codex should pass
+  // through from the user's environment to the MCP server process.
+  // Distinct from `env` (a literal name→value map): `envVars` is a list of
+  // variable NAMES whose values come from the user's shell at runtime.
+  // Only honoured by the codex generator (renamed to `env_vars` in codex
+  // TOML output, matching codex's native field name — see the
+  // `enabledTools`→`enabled_tools` precedent in `codexcli-mcp.ts`).
+  // Stripped by `RulesyncMcp.getMcpServers()` so it does not leak into
+  // other tools' configs.
+  envVars: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string())),
   headers: import_mini24.z.optional(import_mini24.z.record(import_mini24.z.string(), import_mini24.z.string())),
   enabledTools: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string())),
   disabledTools: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string()))
@@ -7743,10 +7755,11 @@ var RulesyncMcp = class _RulesyncMcp extends RulesyncFile {
     });
   }
   getMcpServers() {
-    const entries = Object.entries(this.json.mcpServers);
+    const mcpServers = this.json.mcpServers ?? {};
+    const entries = Object.entries(mcpServers);
     return Object.fromEntries(
       entries.map(([serverName, serverConfig]) => {
-        return [serverName, (0, import_object.omit)(serverConfig, ["targets", "description", "exposed"])];
+        return [serverName, (0, import_object.omit)(serverConfig, ["targets", "description", "exposed", "envVars"])];
       })
     );
   }
@@ -7965,11 +7978,17 @@ var ClineMcp = class _ClineMcp extends ToolMcp {
     rulesyncMcp,
     validate = true
   }) {
+    const json = rulesyncMcp.getJson();
+    const fileContent = JSON.stringify(
+      { ...json, mcpServers: rulesyncMcp.getMcpServers() },
+      null,
+      2
+    );
     return new _ClineMcp({
       outputRoot,
       relativeDirPath: this.getSettablePaths().relativeDirPath,
       relativeFilePath: this.getSettablePaths().relativeFilePath,
-      fileContent: rulesyncMcp.getFileContent(),
+      fileContent,
       validate
     });
   }
@@ -8013,6 +8032,8 @@ function convertFromCodexFormat(codexMcp) {
         converted["enabledTools"] = value;
       } else if (key === "disabled_tools") {
         converted["disabledTools"] = value;
+      } else if (key === "env_vars") {
+        converted["envVars"] = value;
       } else {
         converted[key] = value;
       }
@@ -8034,6 +8055,8 @@ function convertToCodexFormat(mcpServers) {
         converted["enabled_tools"] = value;
       } else if (key === "disabledTools") {
         converted["disabled_tools"] = value;
+      } else if (key === "envVars") {
+        converted["env_vars"] = value;
       } else {
         converted[key] = value;
       }
@@ -8129,7 +8152,12 @@ var CodexcliMcp = class _CodexcliMcp extends ToolMcp {
     const filtered = {};
     for (const [key, value] of Object.entries(obj)) {
       if (value === null) continue;
-      if (typeof value === "object" && Object.keys(value).length === 0) continue;
+      if (typeof value === "object" && !Array.isArray(value)) {
+        const cleaned = this.removeEmptyEntries(value);
+        if (Object.keys(cleaned).length === 0) continue;
+        filtered[key] = cleaned;
+        continue;
+      }
       filtered[key] = value;
     }
     return filtered;
@@ -8506,8 +8534,7 @@ var CursorMcp = class _CursorMcp extends ToolMcp {
         { cause: error }
       );
     }
-    const rulesyncJson = rulesyncMcp.getJson();
-    const mcpServers = isMcpServers(rulesyncJson.mcpServers) ? rulesyncJson.mcpServers : {};
+    const mcpServers = rulesyncMcp.getMcpServers();
     const transformedServers = convertEnvToCursorFormat(mcpServers);
     const cursorConfig = { ...json, mcpServers: transformedServers };
     return new _CursorMcp({
@@ -8676,9 +8703,9 @@ var FactorydroidMcp = class _FactorydroidMcp extends ToolMcp {
     rulesyncMcp,
     validate = true
   }) {
-    const json = rulesyncMcp.getJson();
+    const mcpServers = rulesyncMcp.getMcpServers();
     const factorydroidConfig = {
-      mcpServers: json.mcpServers || {}
+      mcpServers
     };
     const fileContent = JSON.stringify(factorydroidConfig, null, 2);
     return new _FactorydroidMcp({
@@ -8764,7 +8791,7 @@ var GeminiCliMcp = class _GeminiCliMcp extends ToolMcp {
       JSON.stringify({ mcpServers: {} }, null, 2)
     );
     const json = JSON.parse(fileContent);
-    const newJson = { ...json, mcpServers: rulesyncMcp.getJson().mcpServers };
+    const newJson = { ...json, mcpServers: rulesyncMcp.getMcpServers() };
     return new _GeminiCliMcp({
       outputRoot,
       relativeDirPath: paths.relativeDirPath,
@@ -8845,11 +8872,17 @@ var JunieMcp = class _JunieMcp extends ToolMcp {
     rulesyncMcp,
     validate = true
   }) {
+    const json = rulesyncMcp.getJson();
+    const fileContent = JSON.stringify(
+      { ...json, mcpServers: rulesyncMcp.getMcpServers() },
+      null,
+      2
+    );
     return new _JunieMcp({
       outputRoot,
       relativeDirPath: this.getSettablePaths().relativeDirPath,
       relativeFilePath: this.getSettablePaths().relativeFilePath,
-      fileContent: rulesyncMcp.getFileContent(),
+      fileContent,
       validate
     });
   }
@@ -9629,8 +9662,7 @@ var RovodevMcp = class _RovodevMcp extends ToolMcp {
       JSON.stringify({ mcpServers: {} }, null, 2)
     );
     const json = parseRovodevMcpJson(fileContent, paths.relativeDirPath, paths.relativeFilePath);
-    const rulesyncJson = rulesyncMcp.getJson();
-    const mcpServers = isMcpServers(rulesyncJson.mcpServers) ? rulesyncJson.mcpServers : {};
+    const mcpServers = rulesyncMcp.getMcpServers();
     const rovodevConfig = { ...json, mcpServers };
     return new _RovodevMcp({
       outputRoot,
@@ -10934,6 +10966,8 @@ var import_node_path71 = require("path");
 var smolToml4 = __toESM(require("smol-toml"), 1);
 var RULESYNC_PROFILE_NAME = "rulesync";
 var RULESYNC_BASH_RULES_FILE_NAME = "rulesync.rules";
+var CODEX_PROJECT_ROOTS_KEY = ":project_roots";
+var CODEX_GLOB_SCAN_MAX_DEPTH = 8;
 var CodexcliPermissions = class _CodexcliPermissions extends ToolPermissions {
   static getSettablePaths(_options = {}) {
     return {
@@ -11044,17 +11078,30 @@ function convertRulesyncToCodexProfile({
   logger: logger5
 }) {
   const filesystem = {};
+  const projectRootFilesystem = {};
   const domains = {};
   for (const [toolName, rules] of Object.entries(config.permission)) {
     if (toolName === "read") {
       for (const [pattern, action] of Object.entries(rules)) {
-        filesystem[pattern] = mapReadAction(action);
+        addFilesystemRule({
+          filesystem,
+          projectRootFilesystem,
+          pattern,
+          access: mapReadAction(action),
+          logger: logger5
+        });
       }
       continue;
     }
     if (toolName === "edit" || toolName === "write") {
       for (const [pattern, action] of Object.entries(rules)) {
-        filesystem[pattern] = mapWriteAction(action);
+        addFilesystemRule({
+          filesystem,
+          projectRootFilesystem,
+          pattern,
+          access: mapWriteAction(action),
+          logger: logger5
+        });
       }
       continue;
     }
@@ -11074,6 +11121,17 @@ function convertRulesyncToCodexProfile({
       `Codex CLI permissions support only read/edit/write/webfetch categories. Skipping: ${toolName}`
     );
   }
+  if (Object.keys(projectRootFilesystem).length > 0) {
+    if (typeof filesystem[CODEX_PROJECT_ROOTS_KEY] === "string") {
+      logger5?.warn(
+        `"${CODEX_PROJECT_ROOTS_KEY}" is set as a direct filesystem access rule in the permissions, but it will be overwritten by project-root rules. Consider removing the direct "${CODEX_PROJECT_ROOTS_KEY}" entry.`
+      );
+    }
+    if (Object.keys(projectRootFilesystem).some((pattern) => pattern.includes("**"))) {
+      filesystem.glob_scan_max_depth = CODEX_GLOB_SCAN_MAX_DEPTH;
+    }
+    filesystem[CODEX_PROJECT_ROOTS_KEY] = projectRootFilesystem;
+  }
   return {
     ...Object.keys(filesystem).length > 0 ? { filesystem } : {},
     ...Object.keys(domains).length > 0 ? { network: { domains } } : {}
@@ -11085,13 +11143,14 @@ function convertCodexProfileToRulesync(profile) {
     permission.read = {};
     permission.edit = {};
     for (const [pattern, access] of Object.entries(profile.filesystem)) {
-      if (access === "none") {
-        permission.read[pattern] = "deny";
-        permission.edit[pattern] = "deny";
-      } else if (access === "read") {
-        permission.read[pattern] = "allow";
-      } else {
-        permission.edit[pattern] = "allow";
+      if (isCodexFilesystemAccess(access)) {
+        addRulesyncFilesystemRule(permission, pattern, access);
+        continue;
+      }
+      if (isCodexFilesystemRuleTable(access)) {
+        for (const [nestedPattern, nestedAccess] of Object.entries(access)) {
+          addRulesyncFilesystemRule(permission, nestedPattern, nestedAccess);
+        }
       }
     }
   }
@@ -11114,6 +11173,40 @@ function toCodexProfile(value) {
     ...domains ? { network: { domains } } : {}
   };
 }
+function addFilesystemRule({
+  filesystem,
+  projectRootFilesystem,
+  pattern,
+  access,
+  logger: logger5
+}) {
+  if (pattern.trim() === "") {
+    logger5?.warn("Skipping empty pattern in filesystem permissions.");
+    return;
+  }
+  if (canBeCodexFilesystemRoot(pattern)) {
+    filesystem[pattern] = access;
+    return;
+  }
+  projectRootFilesystem[pattern] = access;
+}
+function canBeCodexFilesystemRoot(pattern) {
+  return (0, import_node_path71.isAbsolute)(pattern) || /^[A-Za-z]:[\\/]/.test(pattern) || pattern.startsWith("~/") || pattern === "~" || pattern.startsWith(":");
+}
+function addRulesyncFilesystemRule(permission, pattern, access) {
+  if (access === "none") {
+    permission.read ??= {};
+    permission.edit ??= {};
+    permission.read[pattern] = "deny";
+    permission.edit[pattern] = "deny";
+  } else if (access === "read") {
+    permission.read ??= {};
+    permission.read[pattern] = "allow";
+  } else {
+    permission.edit ??= {};
+    permission.edit[pattern] = "allow";
+  }
+}
 function toMutableTable(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     return {};
@@ -11124,8 +11217,33 @@ function toFilesystemRecord(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
   const result = {};
   for (const [key, raw] of Object.entries(value)) {
-    if (typeof raw !== "string") continue;
-    if (raw === "read" || raw === "write" || raw === "none") {
+    if (isCodexFilesystemAccess(raw)) {
+      result[key] = raw;
+      continue;
+    }
+    if (key === "glob_scan_max_depth" && typeof raw === "number") {
+      result[key] = raw;
+      continue;
+    }
+    const nested = toCodexFilesystemRuleTable(raw);
+    if (nested) {
+      result[key] = nested;
+    }
+  }
+  return Object.keys(result).length > 0 ? result : void 0;
+}
+function isCodexFilesystemAccess(value) {
+  return value === "read" || value === "write" || value === "none";
+}
+function isCodexFilesystemRuleTable(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  return Object.values(value).every(isCodexFilesystemAccess);
+}
+function toCodexFilesystemRuleTable(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const result = {};
+  for (const [key, raw] of Object.entries(value)) {
+    if (isCodexFilesystemAccess(raw)) {
       result[key] = raw;
     }
   }
@@ -13339,7 +13457,8 @@ var RulesyncSkillFrontmatterSchemaInternal = import_mini39.z.looseObject({
       "allowed-tools": import_mini39.z.optional(import_mini39.z.array(import_mini39.z.string())),
       model: import_mini39.z.optional(import_mini39.z.string()),
       "disable-model-invocation": import_mini39.z.optional(import_mini39.z.boolean()),
-      "scheduled-task": import_mini39.z.optional(import_mini39.z.boolean())
+      "scheduled-task": import_mini39.z.optional(import_mini39.z.boolean()),
+      paths: import_mini39.z.optional(import_mini39.z.union([import_mini39.z.string(), import_mini39.z.array(import_mini39.z.string())]))
     })
   ),
   codexcli: import_mini39.z.optional(
@@ -14114,7 +14233,8 @@ var ClaudecodeSkillFrontmatterSchema = import_mini43.z.looseObject({
   description: import_mini43.z.string(),
   "allowed-tools": import_mini43.z.optional(import_mini43.z.array(import_mini43.z.string())),
   model: import_mini43.z.optional(import_mini43.z.string()),
-  "disable-model-invocation": import_mini43.z.optional(import_mini43.z.boolean())
+  "disable-model-invocation": import_mini43.z.optional(import_mini43.z.boolean()),
+  paths: import_mini43.z.optional(import_mini43.z.union([import_mini43.z.string(), import_mini43.z.array(import_mini43.z.string())]))
 });
 var ClaudecodeSkill = class _ClaudecodeSkill extends ToolSkill {
   constructor({
@@ -14187,6 +14307,7 @@ var ClaudecodeSkill = class _ClaudecodeSkill extends ToolSkill {
       ...frontmatter["disable-model-invocation"] !== void 0 && {
         "disable-model-invocation": frontmatter["disable-model-invocation"]
       },
+      ...frontmatter.paths !== void 0 && { paths: frontmatter.paths },
       ...this.relativeDirPath === CLAUDE_SCHEDULED_TASKS_DIR_PATH && { "scheduled-task": true }
     };
     const rulesyncFrontmatter = {
@@ -14224,6 +14345,9 @@ var ClaudecodeSkill = class _ClaudecodeSkill extends ToolSkill {
       },
       ...rulesyncFrontmatter.claudecode?.["disable-model-invocation"] !== void 0 && {
         "disable-model-invocation": rulesyncFrontmatter.claudecode["disable-model-invocation"]
+      },
+      ...rulesyncFrontmatter.claudecode?.paths !== void 0 && {
+        paths: rulesyncFrontmatter.claudecode.paths
       }
     };
     const settablePaths = _ClaudecodeSkill.getSettablePaths({ global });
@@ -31629,7 +31753,7 @@ function wrapCommand({
 }
 
 // src/cli/index.ts
-var getVersion = () => "8.15.1";
+var getVersion = () => "8.17.0";
 function wrapCommand2(name, errorCode, handler) {
   return wrapCommand({ name, errorCode, handler, getVersion });
 }

package/dist/cli/index.js

@@ -79,7 +79,7 @@ import {
   stringifyFrontmatter,
   toPosixPath,
   writeFileContent
-} from "../chunk-3DM6NLND.js";
+} from "../chunk-RXCRO26Z.js";
 
 // src/cli/index.ts
 import { Command } from "commander";
@@ -6485,7 +6485,7 @@ function wrapCommand({
 }
 
 // src/cli/index.ts
-var getVersion = () => "8.15.1";
+var getVersion = () => "8.17.0";
 function wrapCommand2(name, errorCode, handler) {
   return wrapCommand({ name, errorCode, handler, getVersion });
 }

package/dist/index.cjs

@@ -4732,7 +4732,9 @@ async function buildCodexConfigTomlContent({
   if (typeof configToml.features !== "object" || configToml.features === null) {
     configToml.features = {};
   }
-  configToml.features.codex_hooks = true;
+  const features = configToml.features;
+  delete features.codex_hooks;
+  features.hooks = true;
   return smolToml2.stringify(configToml);
 }
 var CodexcliConfigToml = class _CodexcliConfigToml extends ToolFile {
@@ -7514,6 +7516,16 @@ var McpServerSchema = import_mini24.z.looseObject({
   tools: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string())),
   kiroAutoApprove: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string())),
   kiroAutoBlock: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string())),
+  // Codex CLI-specific: list of shell env var names that codex should pass
+  // through from the user's environment to the MCP server process.
+  // Distinct from `env` (a literal name→value map): `envVars` is a list of
+  // variable NAMES whose values come from the user's shell at runtime.
+  // Only honoured by the codex generator (renamed to `env_vars` in codex
+  // TOML output, matching codex's native field name — see the
+  // `enabledTools`→`enabled_tools` precedent in `codexcli-mcp.ts`).
+  // Stripped by `RulesyncMcp.getMcpServers()` so it does not leak into
+  // other tools' configs.
+  envVars: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string())),
   headers: import_mini24.z.optional(import_mini24.z.record(import_mini24.z.string(), import_mini24.z.string())),
   enabledTools: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string())),
   disabledTools: import_mini24.z.optional(import_mini24.z.array(import_mini24.z.string()))
@@ -7616,10 +7628,11 @@ var RulesyncMcp = class _RulesyncMcp extends RulesyncFile {
     });
   }
   getMcpServers() {
-    const entries = Object.entries(this.json.mcpServers);
+    const mcpServers = this.json.mcpServers ?? {};
+    const entries = Object.entries(mcpServers);
     return Object.fromEntries(
       entries.map(([serverName, serverConfig]) => {
-        return [serverName, (0, import_object.omit)(serverConfig, ["targets", "description", "exposed"])];
+        return [serverName, (0, import_object.omit)(serverConfig, ["targets", "description", "exposed", "envVars"])];
       })
     );
   }
@@ -7838,11 +7851,17 @@ var ClineMcp = class _ClineMcp extends ToolMcp {
     rulesyncMcp,
     validate = true
   }) {
+    const json = rulesyncMcp.getJson();
+    const fileContent = JSON.stringify(
+      { ...json, mcpServers: rulesyncMcp.getMcpServers() },
+      null,
+      2
+    );
     return new _ClineMcp({
       outputRoot,
       relativeDirPath: this.getSettablePaths().relativeDirPath,
       relativeFilePath: this.getSettablePaths().relativeFilePath,
-      fileContent: rulesyncMcp.getFileContent(),
+      fileContent,
       validate
     });
   }
@@ -7886,6 +7905,8 @@ function convertFromCodexFormat(codexMcp) {
         converted["enabledTools"] = value;
       } else if (key === "disabled_tools") {
         converted["disabledTools"] = value;
+      } else if (key === "env_vars") {
+        converted["envVars"] = value;
       } else {
         converted[key] = value;
       }
@@ -7907,6 +7928,8 @@ function convertToCodexFormat(mcpServers) {
         converted["enabled_tools"] = value;
       } else if (key === "disabledTools") {
         converted["disabled_tools"] = value;
+      } else if (key === "envVars") {
+        converted["env_vars"] = value;
       } else {
         converted[key] = value;
       }
@@ -8002,7 +8025,12 @@ var CodexcliMcp = class _CodexcliMcp extends ToolMcp {
     const filtered = {};
     for (const [key, value] of Object.entries(obj)) {
       if (value === null) continue;
-      if (typeof value === "object" && Object.keys(value).length === 0) continue;
+      if (typeof value === "object" && !Array.isArray(value)) {
+        const cleaned = this.removeEmptyEntries(value);
+        if (Object.keys(cleaned).length === 0) continue;
+        filtered[key] = cleaned;
+        continue;
+      }
       filtered[key] = value;
     }
     return filtered;
@@ -8379,8 +8407,7 @@ var CursorMcp = class _CursorMcp extends ToolMcp {
         { cause: error }
       );
     }
-    const rulesyncJson = rulesyncMcp.getJson();
-    const mcpServers = isMcpServers(rulesyncJson.mcpServers) ? rulesyncJson.mcpServers : {};
+    const mcpServers = rulesyncMcp.getMcpServers();
     const transformedServers = convertEnvToCursorFormat(mcpServers);
     const cursorConfig = { ...json, mcpServers: transformedServers };
     return new _CursorMcp({
@@ -8549,9 +8576,9 @@ var FactorydroidMcp = class _FactorydroidMcp extends ToolMcp {
     rulesyncMcp,
     validate = true
   }) {
-    const json = rulesyncMcp.getJson();
+    const mcpServers = rulesyncMcp.getMcpServers();
     const factorydroidConfig = {
-      mcpServers: json.mcpServers || {}
+      mcpServers
     };
     const fileContent = JSON.stringify(factorydroidConfig, null, 2);
     return new _FactorydroidMcp({
@@ -8637,7 +8664,7 @@ var GeminiCliMcp = class _GeminiCliMcp extends ToolMcp {
       JSON.stringify({ mcpServers: {} }, null, 2)
     );
     const json = JSON.parse(fileContent);
-    const newJson = { ...json, mcpServers: rulesyncMcp.getJson().mcpServers };
+    const newJson = { ...json, mcpServers: rulesyncMcp.getMcpServers() };
     return new _GeminiCliMcp({
       outputRoot,
       relativeDirPath: paths.relativeDirPath,
@@ -8718,11 +8745,17 @@ var JunieMcp = class _JunieMcp extends ToolMcp {
     rulesyncMcp,
     validate = true
   }) {
+    const json = rulesyncMcp.getJson();
+    const fileContent = JSON.stringify(
+      { ...json, mcpServers: rulesyncMcp.getMcpServers() },
+      null,
+      2
+    );
     return new _JunieMcp({
       outputRoot,
       relativeDirPath: this.getSettablePaths().relativeDirPath,
       relativeFilePath: this.getSettablePaths().relativeFilePath,
-      fileContent: rulesyncMcp.getFileContent(),
+      fileContent,
       validate
     });
   }
@@ -9502,8 +9535,7 @@ var RovodevMcp = class _RovodevMcp extends ToolMcp {
       JSON.stringify({ mcpServers: {} }, null, 2)
     );
     const json = parseRovodevMcpJson(fileContent, paths.relativeDirPath, paths.relativeFilePath);
-    const rulesyncJson = rulesyncMcp.getJson();
-    const mcpServers = isMcpServers(rulesyncJson.mcpServers) ? rulesyncJson.mcpServers : {};
+    const mcpServers = rulesyncMcp.getMcpServers();
     const rovodevConfig = { ...json, mcpServers };
     return new _RovodevMcp({
       outputRoot,
@@ -10807,6 +10839,8 @@ var import_node_path71 = require("path");
 var smolToml4 = __toESM(require("smol-toml"), 1);
 var RULESYNC_PROFILE_NAME = "rulesync";
 var RULESYNC_BASH_RULES_FILE_NAME = "rulesync.rules";
+var CODEX_PROJECT_ROOTS_KEY = ":project_roots";
+var CODEX_GLOB_SCAN_MAX_DEPTH = 8;
 var CodexcliPermissions = class _CodexcliPermissions extends ToolPermissions {
   static getSettablePaths(_options = {}) {
     return {
@@ -10917,17 +10951,30 @@ function convertRulesyncToCodexProfile({
   logger
 }) {
   const filesystem = {};
+  const projectRootFilesystem = {};
   const domains = {};
   for (const [toolName, rules] of Object.entries(config.permission)) {
     if (toolName === "read") {
       for (const [pattern, action] of Object.entries(rules)) {
-        filesystem[pattern] = mapReadAction(action);
+        addFilesystemRule({
+          filesystem,
+          projectRootFilesystem,
+          pattern,
+          access: mapReadAction(action),
+          logger
+        });
       }
       continue;
     }
     if (toolName === "edit" || toolName === "write") {
       for (const [pattern, action] of Object.entries(rules)) {
-        filesystem[pattern] = mapWriteAction(action);
+        addFilesystemRule({
+          filesystem,
+          projectRootFilesystem,
+          pattern,
+          access: mapWriteAction(action),
+          logger
+        });
       }
       continue;
     }
@@ -10947,6 +10994,17 @@ function convertRulesyncToCodexProfile({
       `Codex CLI permissions support only read/edit/write/webfetch categories. Skipping: ${toolName}`
     );
   }
+  if (Object.keys(projectRootFilesystem).length > 0) {
+    if (typeof filesystem[CODEX_PROJECT_ROOTS_KEY] === "string") {
+      logger?.warn(
+        `"${CODEX_PROJECT_ROOTS_KEY}" is set as a direct filesystem access rule in the permissions, but it will be overwritten by project-root rules. Consider removing the direct "${CODEX_PROJECT_ROOTS_KEY}" entry.`
+      );
+    }
+    if (Object.keys(projectRootFilesystem).some((pattern) => pattern.includes("**"))) {
+      filesystem.glob_scan_max_depth = CODEX_GLOB_SCAN_MAX_DEPTH;
+    }
+    filesystem[CODEX_PROJECT_ROOTS_KEY] = projectRootFilesystem;
+  }
   return {
     ...Object.keys(filesystem).length > 0 ? { filesystem } : {},
     ...Object.keys(domains).length > 0 ? { network: { domains } } : {}
@@ -10958,13 +11016,14 @@ function convertCodexProfileToRulesync(profile) {
     permission.read = {};
     permission.edit = {};
     for (const [pattern, access] of Object.entries(profile.filesystem)) {
-      if (access === "none") {
-        permission.read[pattern] = "deny";
-        permission.edit[pattern] = "deny";
-      } else if (access === "read") {
-        permission.read[pattern] = "allow";
-      } else {
-        permission.edit[pattern] = "allow";
+      if (isCodexFilesystemAccess(access)) {
+        addRulesyncFilesystemRule(permission, pattern, access);
+        continue;
+      }
+      if (isCodexFilesystemRuleTable(access)) {
+        for (const [nestedPattern, nestedAccess] of Object.entries(access)) {
+          addRulesyncFilesystemRule(permission, nestedPattern, nestedAccess);
+        }
       }
     }
   }
@@ -10987,6 +11046,40 @@ function toCodexProfile(value) {
     ...domains ? { network: { domains } } : {}
   };
 }
+function addFilesystemRule({
+  filesystem,
+  projectRootFilesystem,
+  pattern,
+  access,
+  logger
+}) {
+  if (pattern.trim() === "") {
+    logger?.warn("Skipping empty pattern in filesystem permissions.");
+    return;
+  }
+  if (canBeCodexFilesystemRoot(pattern)) {
+    filesystem[pattern] = access;
+    return;
+  }
+  projectRootFilesystem[pattern] = access;
+}
+function canBeCodexFilesystemRoot(pattern) {
+  return (0, import_node_path71.isAbsolute)(pattern) || /^[A-Za-z]:[\\/]/.test(pattern) || pattern.startsWith("~/") || pattern === "~" || pattern.startsWith(":");
+}
+function addRulesyncFilesystemRule(permission, pattern, access) {
+  if (access === "none") {
+    permission.read ??= {};
+    permission.edit ??= {};
+    permission.read[pattern] = "deny";
+    permission.edit[pattern] = "deny";
+  } else if (access === "read") {
+    permission.read ??= {};
+    permission.read[pattern] = "allow";
+  } else {
+    permission.edit ??= {};
+    permission.edit[pattern] = "allow";
+  }
+}
 function toMutableTable(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     return {};
@@ -10997,8 +11090,33 @@ function toFilesystemRecord(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
   const result = {};
   for (const [key, raw] of Object.entries(value)) {
-    if (typeof raw !== "string") continue;
-    if (raw === "read" || raw === "write" || raw === "none") {
+    if (isCodexFilesystemAccess(raw)) {
+      result[key] = raw;
+      continue;
+    }
+    if (key === "glob_scan_max_depth" && typeof raw === "number") {
+      result[key] = raw;
+      continue;
+    }
+    const nested = toCodexFilesystemRuleTable(raw);
+    if (nested) {
+      result[key] = nested;
+    }
+  }
+  return Object.keys(result).length > 0 ? result : void 0;
+}
+function isCodexFilesystemAccess(value) {
+  return value === "read" || value === "write" || value === "none";
+}
+function isCodexFilesystemRuleTable(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  return Object.values(value).every(isCodexFilesystemAccess);
+}
+function toCodexFilesystemRuleTable(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const result = {};
+  for (const [key, raw] of Object.entries(value)) {
+    if (isCodexFilesystemAccess(raw)) {
       result[key] = raw;
     }
   }
@@ -13212,7 +13330,8 @@ var RulesyncSkillFrontmatterSchemaInternal = import_mini39.z.looseObject({
       "allowed-tools": import_mini39.z.optional(import_mini39.z.array(import_mini39.z.string())),
       model: import_mini39.z.optional(import_mini39.z.string()),
       "disable-model-invocation": import_mini39.z.optional(import_mini39.z.boolean()),
-      "scheduled-task": import_mini39.z.optional(import_mini39.z.boolean())
+      "scheduled-task": import_mini39.z.optional(import_mini39.z.boolean()),
+      paths: import_mini39.z.optional(import_mini39.z.union([import_mini39.z.string(), import_mini39.z.array(import_mini39.z.string())]))
     })
   ),
   codexcli: import_mini39.z.optional(
@@ -13987,7 +14106,8 @@ var ClaudecodeSkillFrontmatterSchema = import_mini43.z.looseObject({
   description: import_mini43.z.string(),
   "allowed-tools": import_mini43.z.optional(import_mini43.z.array(import_mini43.z.string())),
   model: import_mini43.z.optional(import_mini43.z.string()),
-  "disable-model-invocation": import_mini43.z.optional(import_mini43.z.boolean())
+  "disable-model-invocation": import_mini43.z.optional(import_mini43.z.boolean()),
+  paths: import_mini43.z.optional(import_mini43.z.union([import_mini43.z.string(), import_mini43.z.array(import_mini43.z.string())]))
 });
 var ClaudecodeSkill = class _ClaudecodeSkill extends ToolSkill {
   constructor({
@@ -14060,6 +14180,7 @@ var ClaudecodeSkill = class _ClaudecodeSkill extends ToolSkill {
       ...frontmatter["disable-model-invocation"] !== void 0 && {
         "disable-model-invocation": frontmatter["disable-model-invocation"]
       },
+      ...frontmatter.paths !== void 0 && { paths: frontmatter.paths },
       ...this.relativeDirPath === CLAUDE_SCHEDULED_TASKS_DIR_PATH && { "scheduled-task": true }
     };
     const rulesyncFrontmatter = {
@@ -14097,6 +14218,9 @@ var ClaudecodeSkill = class _ClaudecodeSkill extends ToolSkill {
       },
       ...rulesyncFrontmatter.claudecode?.["disable-model-invocation"] !== void 0 && {
         "disable-model-invocation": rulesyncFrontmatter.claudecode["disable-model-invocation"]
+      },
+      ...rulesyncFrontmatter.claudecode?.paths !== void 0 && {
+        paths: rulesyncFrontmatter.claudecode.paths
       }
     };
     const settablePaths = _ClaudecodeSkill.getSettablePaths({ global });

package/dist/index.d.cts

@@ -183,6 +183,7 @@ declare const RulesyncSkillFrontmatterSchemaInternal: z.ZodMiniObject<{
         model: z.ZodMiniOptional<z.ZodMiniString<string>>;
         "disable-model-invocation": z.ZodMiniOptional<z.ZodMiniBoolean<boolean>>;
         "scheduled-task": z.ZodMiniOptional<z.ZodMiniBoolean<boolean>>;
+        paths: z.ZodMiniOptional<z.ZodMiniUnion<readonly [z.ZodMiniString<string>, z.ZodMiniArray<z.ZodMiniString<string>>]>>;
     }, z.core.$loose>>;
     codexcli: z.ZodMiniOptional<z.ZodMiniObject<{
         "short-description": z.ZodMiniOptional<z.ZodMiniString<string>>;
@@ -214,6 +215,7 @@ type RulesyncSkillFrontmatterInput = {
         model?: string;
         "disable-model-invocation"?: boolean;
         "scheduled-task"?: boolean;
+        paths?: string | string[];
     };
     codexcli?: {
         "short-description"?: string;

package/dist/index.d.ts

@@ -183,6 +183,7 @@ declare const RulesyncSkillFrontmatterSchemaInternal: z.ZodMiniObject<{
         model: z.ZodMiniOptional<z.ZodMiniString<string>>;
         "disable-model-invocation": z.ZodMiniOptional<z.ZodMiniBoolean<boolean>>;
         "scheduled-task": z.ZodMiniOptional<z.ZodMiniBoolean<boolean>>;
+        paths: z.ZodMiniOptional<z.ZodMiniUnion<readonly [z.ZodMiniString<string>, z.ZodMiniArray<z.ZodMiniString<string>>]>>;
     }, z.core.$loose>>;
     codexcli: z.ZodMiniOptional<z.ZodMiniObject<{
         "short-description": z.ZodMiniOptional<z.ZodMiniString<string>>;
@@ -214,6 +215,7 @@ type RulesyncSkillFrontmatterInput = {
         model?: string;
         "disable-model-invocation"?: boolean;
         "scheduled-task"?: boolean;
+        paths?: string | string[];
     };
     codexcli?: {
         "short-description"?: string;

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   convertFromTool,
   generate,
   importFromTool
-} from "./chunk-3DM6NLND.js";
+} from "./chunk-RXCRO26Z.js";
 
 // src/index.ts
 async function generate2(options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rulesync",
-  "version": "8.15.1",
+  "version": "8.17.0",
   "description": "Unified AI rules management CLI tool that generates configuration files for various AI development tools",
   "keywords": [
     "ai",