subconscious-cli 0.2.1 → 0.3.1

package/bin/runbook/claude-code/run.sh

@@ -0,0 +1,164 @@
+#!/usr/bin/env bash
+# Point the `claude` CLI at the Subconscious gateway — ephemerally.
+#
+# Uses env vars only (ANTHROPIC_BASE_URL / ANTHROPIC_AUTH_TOKEN) so nothing is
+# written to ~/.claude/ config files.
+#
+# Usage:
+#   ./run.sh                         # uses GATEWAY_URL/API_KEY from ../.env
+#   ./run.sh --continue               # pass args through to claude
+#   ./run.sh --compact-window 1000000 -- --continue
+#   ./run.sh --model subconscious/glm-5.2 -p "hi"
+#
+# Config: copy ../env.example to ../.env and edit. .env is gitignored.
+# Profile env is injected by subc. A sibling .env is only used when SUBC_ENV_FILE is unset.
+#
+# Or source it to just export the env:
+#   source run.sh
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+# Load shared env from SUBC_ENV_FILE, or a sibling .env / env.example.
+SHARED_ENV="${SUBC_ENV_FILE:-${SCRIPT_DIR}/../.env}"
+[[ -f "$SHARED_ENV" ]] || SHARED_ENV="${SCRIPT_DIR}/../env.example"
+if [[ -f "$SHARED_ENV" ]]; then set -a; source "$SHARED_ENV"; set +a; fi
+
+DEFAULT_MODEL="subconscious/glm-5.2"
+DEFAULT_COMPACT_WINDOW="1000000"
+DEFAULT_MAX_CONTEXT_TOKENS="3000000"
+DEFAULT_MAX_CONCURRENT_SUBAGENTS="4"
+DEFAULT_MAX_SUBAGENT_SPAWN_DEPTH="1"
+DEFAULT_OPUS_MODEL="subconscious/glm-5.2"
+DEFAULT_SONNET_MODEL="subconscious/tim-qwen3.6-27b"
+DEFAULT_HAIKU_MODEL="subconscious/deepseek-v4-flash-marathon"
+
+GATEWAY_URL="${GATEWAY_URL:-}"
+API_KEY="${CLAUDE_CODE_API_KEY:-${API_KEY:-}}"
+MODEL="${MODEL:-$DEFAULT_MODEL}"
+COMPACT_WINDOW="${CLAUDE_CODE_AUTO_COMPACT_WINDOW:-${COMPACT_WINDOW:-$DEFAULT_COMPACT_WINDOW}}"
+MAX_CONTEXT_TOKENS="${CLAUDE_CODE_MAX_CONTEXT_TOKENS:-${MAX_CONTEXT_TOKENS:-$DEFAULT_MAX_CONTEXT_TOKENS}}"
+MAX_CONCURRENT_SUBAGENTS="${MAX_CONCURRENT_SUBAGENTS:-$DEFAULT_MAX_CONCURRENT_SUBAGENTS}"
+MAX_SUBAGENT_SPAWN_DEPTH="${MAX_SUBAGENT_SPAWN_DEPTH:-$DEFAULT_MAX_SUBAGENT_SPAWN_DEPTH}"
+OPUS_MODEL="${ANTHROPIC_DEFAULT_OPUS_MODEL:-$DEFAULT_OPUS_MODEL}"
+OPUS_MODEL_NAME="${ANTHROPIC_DEFAULT_OPUS_MODEL_NAME:-$OPUS_MODEL}"
+OPUS_MODEL_DESCRIPTION="${ANTHROPIC_DEFAULT_OPUS_MODEL_DESCRIPTION:-Subconscious default model}"
+SONNET_MODEL="${ANTHROPIC_DEFAULT_SONNET_MODEL:-$DEFAULT_SONNET_MODEL}"
+SONNET_MODEL_NAME="${ANTHROPIC_DEFAULT_SONNET_MODEL_NAME:-$SONNET_MODEL}"
+SONNET_MODEL_DESCRIPTION="${ANTHROPIC_DEFAULT_SONNET_MODEL_DESCRIPTION:-Subconscious TIM Qwen 3.6 27B}"
+HAIKU_MODEL="${ANTHROPIC_DEFAULT_HAIKU_MODEL:-$DEFAULT_HAIKU_MODEL}"
+HAIKU_MODEL_NAME="${ANTHROPIC_DEFAULT_HAIKU_MODEL_NAME:-$HAIKU_MODEL}"
+HAIKU_MODEL_DESCRIPTION="${ANTHROPIC_DEFAULT_HAIKU_MODEL_DESCRIPTION:-Subconscious DeepSeek V4 Flash Marathon}"
+
+usage() {
+  cat <<'EOF'
+Usage:
+  run.sh [options] [-- CLAUDE_ARGS...]
+  run.sh [options] CLAUDE_ARGS...
+
+Options (same as install.sh; flags override env for this run):
+  --gateway-url URL      Gateway origin (e.g. https://gateway.example)
+  --api-key KEY          Gateway API key (sk-gw-...)
+  --model MODEL          Model name (default: subconscious/glm-5.2)
+  --compact-window N     CLAUDE_CODE_AUTO_COMPACT_WINDOW (default: 1000000; Claude Code clamps to 100000–1000000)
+                         See https://code.claude.com/docs/en/env-vars and
+                         https://code.claude.com/docs/en/context-window#set-the-auto-compact-window
+  --max-context-tokens N CLAUDE_CODE_MAX_CONTEXT_TOKENS (default: 3000000)
+                         See https://code.claude.com/docs/en/env-vars
+  -h, --help             Show this help
+
+Anything after --, or unrecognized flags/args, is passed through to `claude`.
+EOF
+}
+
+# Parse args (only when executed, not sourced)
+PASSTHRU=()
+if [[ "${BASH_SOURCE[0]:-$0}" == "${0}" ]]; then
+  while [[ $# -gt 0 ]]; do
+    case "$1" in
+      --gateway-url)
+        GATEWAY_URL="${2:-}"
+        shift 2
+        ;;
+      --api-key)
+        API_KEY="${2:-}"
+        shift 2
+        ;;
+      --model)
+        MODEL="${2:-}"
+        shift 2
+        ;;
+      --compact-window)
+        COMPACT_WINDOW="${2:-}"
+        shift 2
+        ;;
+      --max-context-tokens)
+        MAX_CONTEXT_TOKENS="${2:-}"
+        shift 2
+        ;;
+      -h|--help)
+        usage
+        exit 0
+        ;;
+      --)
+        shift
+        PASSTHRU+=("$@")
+        break
+        ;;
+      *)
+        PASSTHRU+=("$1")
+        shift
+        ;;
+    esac
+  done
+fi
+
+if [[ -z "$GATEWAY_URL" || -z "$API_KEY" ]]; then
+  echo "error: GATEWAY_URL and API_KEY must be set in ../.env (or pass --gateway-url / --api-key)" >&2
+  exit 1
+fi
+
+# Optional CLAUDE_GATEWAY_URL in shared .env overrides GATEWAY_URL for Claude only
+# (CLI --gateway-url already updated GATEWAY_URL above).
+EFFECTIVE_GATEWAY_URL="${CLAUDE_GATEWAY_URL:-$GATEWAY_URL}"
+
+export ANTHROPIC_BASE_URL="$EFFECTIVE_GATEWAY_URL"
+export ANTHROPIC_AUTH_TOKEN="$API_KEY"
+export ANTHROPIC_MODEL="${ANTHROPIC_MODEL:-$MODEL}"
+export ANTHROPIC_SMALL_FAST_MODEL="${ANTHROPIC_SMALL_FAST_MODEL:-$MODEL}"
+export ANTHROPIC_DEFAULT_OPUS_MODEL="${ANTHROPIC_DEFAULT_OPUS_MODEL:-$OPUS_MODEL}"
+export ANTHROPIC_DEFAULT_OPUS_MODEL_NAME="${ANTHROPIC_DEFAULT_OPUS_MODEL_NAME:-$OPUS_MODEL_NAME}"
+export ANTHROPIC_DEFAULT_OPUS_MODEL_DESCRIPTION="${ANTHROPIC_DEFAULT_OPUS_MODEL_DESCRIPTION:-$OPUS_MODEL_DESCRIPTION}"
+export ANTHROPIC_DEFAULT_SONNET_MODEL="${ANTHROPIC_DEFAULT_SONNET_MODEL:-$SONNET_MODEL}"
+export ANTHROPIC_DEFAULT_SONNET_MODEL_NAME="${ANTHROPIC_DEFAULT_SONNET_MODEL_NAME:-$SONNET_MODEL_NAME}"
+export ANTHROPIC_DEFAULT_SONNET_MODEL_DESCRIPTION="${ANTHROPIC_DEFAULT_SONNET_MODEL_DESCRIPTION:-$SONNET_MODEL_DESCRIPTION}"
+export ANTHROPIC_DEFAULT_HAIKU_MODEL="${ANTHROPIC_DEFAULT_HAIKU_MODEL:-$HAIKU_MODEL}"
+export ANTHROPIC_DEFAULT_HAIKU_MODEL_NAME="${ANTHROPIC_DEFAULT_HAIKU_MODEL_NAME:-$HAIKU_MODEL_NAME}"
+export ANTHROPIC_DEFAULT_HAIKU_MODEL_DESCRIPTION="${ANTHROPIC_DEFAULT_HAIKU_MODEL_DESCRIPTION:-$HAIKU_MODEL_DESCRIPTION}"
+export CLAUDE_CODE_SUBAGENT_MODEL="${CLAUDE_CODE_SUBAGENT_MODEL:-$MODEL}"
+export CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS="${MAX_CONCURRENT_SUBAGENTS}"
+export CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH="${MAX_SUBAGENT_SPAWN_DEPTH}"
+export CLAUDE_CODE_AUTO_COMPACT_WINDOW="${COMPACT_WINDOW}"
+export CLAUDE_CODE_MAX_CONTEXT_TOKENS="${MAX_CONTEXT_TOKENS}"
+# Claude Code purpose attribution only: api_request logs → gateway POST /v1/logs
+# (not a general logs API). Docs:
+# https://code.claude.com/docs/en/monitoring-usage#api-request-event
+# Requires Claude Code >= 2.1.152.
+export CLAUDE_CODE_ENABLE_TELEMETRY="${CLAUDE_CODE_ENABLE_TELEMETRY:-1}"
+export CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC="${CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC:-1}"
+export OTEL_LOGS_EXPORTER="${OTEL_LOGS_EXPORTER:-otlp}"
+export OTEL_EXPORTER_OTLP_PROTOCOL="${OTEL_EXPORTER_OTLP_PROTOCOL:-http/json}"
+export OTEL_EXPORTER_OTLP_LOGS_ENDPOINT="${EFFECTIVE_GATEWAY_URL%/}/v1/logs"
+export OTEL_EXPORTER_OTLP_HEADERS="x-api-key=${API_KEY}"
+export OTEL_EXPORTER_OTLP_TIMEOUT="${OTEL_EXPORTER_OTLP_TIMEOUT:-2000}"
+export OTEL_LOGS_EXPORT_INTERVAL="${OTEL_LOGS_EXPORT_INTERVAL:-2000}"
+# Do not set OTEL_TRACES_EXPORTER / OTEL_METRICS_EXPORTER (including to "none") -
+# Claude's telemetry init can abort the whole pipeline on unknown exporter types.
+# If sourced, export env and return (caller can unset when done).
+if [[ "${BASH_SOURCE[0]:-$0}" != "${0}" ]]; then
+  return 0 2>/dev/null || true
+fi
+
+# If executed, launch claude with any passed-through args.
+exec claude ${PASSTHRU[@]+"${PASSTHRU[@]}"}

package/bin/runbook/codex/hook.sh

@@ -0,0 +1,112 @@
+#!/usr/bin/env bash
+# Fail-open Codex hook: report PreCompact / PostCompact to the gateway.
+# Never blocks compaction (do not return continue: false).
+#
+# Docs: https://developers.openai.com/codex/hooks
+#
+#   PreCompact  -> conversation_compaction { phase: start }
+#   PostCompact -> conversation_compaction { phase: end }
+#
+# Custom (non-OpenAI-named) providers compact locally through the configured
+# Responses endpoint, so the summarization request hits the gateway between
+# these two signals. conversation_id is the hook session_id, which Codex
+# examples show as thr_… — the same value the gateway uses as thread-id
+# grouping. Capture after upgrades if that ever diverges.
+#
+# Stdin: Codex hook JSON. Stdout: empty success (or {} ). Exit 0 always.
+
+set -u
+
+CONFIG="${SUBCONSCIOUS_HOOKS_ENV:-${HOME}/.codex/subconscious-hooks.env}"
+if [[ -f "$CONFIG" ]]; then
+  # shellcheck disable=SC1090
+  source "$CONFIG"
+fi
+# Older overwrite-style setup also wrote subconscious.env; keep reading it.
+if [[ -f "${HOME}/.codex/subconscious.env" ]]; then
+  # shellcheck disable=SC1090
+  source "${HOME}/.codex/subconscious.env"
+fi
+
+GATEWAY_URL="${SUBCONSCIOUS_GATEWAY_URL:-}"
+API_KEY="${SUBCONSCIOUS_API_KEY:-}"
+
+fail_open() {
+  exit 0
+}
+
+if [[ -z "$GATEWAY_URL" || -z "$API_KEY" ]]; then
+  echo "subconscious codex hook: missing SUBCONSCIOUS_GATEWAY_URL or SUBCONSCIOUS_API_KEY" >&2
+  fail_open
+fi
+
+for tool in jq curl; do
+  if ! command -v "$tool" >/dev/null 2>&1; then
+    echo "subconscious codex hook: ${tool} is required" >&2
+    fail_open
+  fi
+done
+
+INPUT="$(cat || true)"
+if [[ -z "$INPUT" ]]; then
+  fail_open
+fi
+
+# Local fire-log for capture/debug (never blocks).
+FIRE_LOG_DIR="${SUBCONSCIOUS_CODEX_HOOK_LOG_DIR:-${HOME}/.codex/subconscious-hook-logs}"
+mkdir -p "$FIRE_LOG_DIR" 2>/dev/null || true
+
+HOOK_EVENT="$(printf '%s' "$INPUT" | jq -r '.hook_event_name // empty' 2>/dev/null || true)"
+case "$HOOK_EVENT" in
+  PreCompact) PHASE="start" ;;
+  PostCompact) PHASE="end" ;;
+  *) fail_open ;;
+esac
+
+SESSION_ID="$(printf '%s' "$INPUT" | jq -r '.session_id // empty' 2>/dev/null || true)"
+if [[ -z "$SESSION_ID" ]]; then
+  fail_open
+fi
+
+{
+  printf '%s event=%s session_id=%s payload=' "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$HOOK_EVENT" "$SESSION_ID"
+  printf '%s\n' "$INPUT"
+} >>"${FIRE_LOG_DIR}/${SESSION_ID}.log" 2>/dev/null || true
+
+TURN_ID="$(printf '%s' "$INPUT" | jq -r '.turn_id // empty' 2>/dev/null || true)"
+TRIGGER="$(printf '%s' "$INPUT" | jq -r '.trigger // empty' 2>/dev/null || true)"
+NOW_MS="$(date +%s)-$$-$RANDOM"
+if [[ -n "$TURN_ID" ]]; then
+  DEDUPE_KEY="${SESSION_ID}:${PHASE}:${TURN_ID}"
+else
+  DEDUPE_KEY="${SESSION_ID}:${PHASE}:${NOW_MS}"
+fi
+
+PAYLOAD="$(jq -n \
+  --arg conversation_id "$SESSION_ID" \
+  --arg phase "$PHASE" \
+  --arg hook_event_name "$HOOK_EVENT" \
+  --arg dedupe_key "$DEDUPE_KEY" \
+  --arg trigger "$TRIGGER" \
+  --arg turn_id "$TURN_ID" \
+  '{
+    event: "conversation_compaction",
+    conversation_id: $conversation_id,
+    phase: $phase,
+    hook_event_name: $hook_event_name,
+    dedupe_key: $dedupe_key,
+    metadata: {
+      trigger: (if $trigger == "" then null else $trigger end),
+      turn_id: (if $turn_id == "" then null else $turn_id end)
+    } | with_entries(select(.value != null))
+  }'
+)"
+
+curl -sS -m 2 \
+  -H "Authorization: Bearer ${API_KEY}" \
+  -H "Content-Type: application/json" \
+  -H "x-subconscious-client: codex" \
+  -d "$PAYLOAD" \
+  "${GATEWAY_URL%/}/v1/agent-hooks" >/dev/null 2>&1 || true
+
+fail_open

package/bin/runbook/codex/hooks-lib.sh

@@ -0,0 +1,139 @@
+#!/usr/bin/env bash
+# Surgical Codex hook merge/unmerge. Sourced by install.sh and run.sh.
+# Never reads, writes, or deletes ~/.codex/config.toml.
+
+CODEX_DIR="${CODEX_DIR:-${HOME}/.codex}"
+HOOKS_JSON="${HOOKS_JSON:-${CODEX_DIR}/hooks.json}"
+HOOK_DST="${HOOK_DST:-${CODEX_DIR}/subconscious-hook.sh}"
+HOOKS_ENV_FILE="${HOOKS_ENV_FILE:-${CODEX_DIR}/subconscious-hooks.env}"
+MARKER="${MARKER:-subconscious-hook.sh}"
+
+codex_hooks_have_jq() {
+  command -v jq >/dev/null 2>&1
+}
+
+codex_hooks_json_valid() {
+  [[ -f "$HOOKS_JSON" ]] && jq -e . "$HOOKS_JSON" >/dev/null 2>&1
+}
+
+codex_strip_hook_entries() {
+  local tmp
+  tmp="$(mktemp)"
+  jq --arg marker "$MARKER" '
+    def strip:
+      (. // [])
+      | map(
+          .hooks = ((.hooks // []) | map(select((.command // "") | tostring | contains($marker) | not)))
+        )
+      | map(select((.hooks | length) > 0));
+    .hooks = (.hooks // {})
+    | .hooks |= with_entries(.value |= strip)
+  ' "$HOOKS_JSON" >"$tmp"
+  mv "$tmp" "$HOOKS_JSON"
+}
+
+codex_append_hook_groups() {
+  local tmp
+  tmp="$(mktemp)"
+  jq --arg cmd "$HOOK_DST" '
+    def group($msg):
+      [{ "hooks": [{ "type": "command", "command": $cmd, "timeout": 3, "statusMessage": $msg }] }];
+    .hooks = (.hooks // {})
+    | .hooks.PreCompact = ((.hooks.PreCompact // []) + group("Reporting compaction start"))
+    | .hooks.PostCompact = ((.hooks.PostCompact // []) + group("Reporting compaction end"))
+  ' "$HOOKS_JSON" >"$tmp"
+  mv "$tmp" "$HOOKS_JSON"
+}
+
+codex_write_hook_script() {
+  mkdir -p "$CODEX_DIR"
+  cp "$HOOK_SRC" "$HOOK_DST"
+  chmod +x "$HOOK_DST"
+}
+
+codex_write_hooks_env() {
+  umask 077
+  cat >"$HOOKS_ENV_FILE" <<EOF
+# Generated by subconscious-cli Codex integration — do not commit secrets.
+export SUBCONSCIOUS_GATEWAY_URL='${GATEWAY_URL%/}'
+export SUBCONSCIOUS_API_KEY='${API_KEY}'
+EOF
+  chmod 600 "$HOOKS_ENV_FILE"
+}
+
+# codex_ensure_hooks [strict|best-effort]
+codex_ensure_hooks() {
+  local mode="${1:-strict}"
+  if ! codex_hooks_have_jq; then
+    echo "warning: jq is required to merge Codex hooks without overwriting ~/.codex/hooks.json" >&2
+    if [[ "$mode" == "strict" ]]; then
+      echo "missing required command: jq" >&2
+      return 1
+    fi
+    return 0
+  fi
+  if [[ -z "${GATEWAY_URL:-}" || -z "${API_KEY:-}" ]]; then
+    echo "--gateway-url and --api-key are required to install Codex hooks" >&2
+    return 1
+  fi
+  if [[ -z "${HOOK_SRC:-}" || ! -f "$HOOK_SRC" ]]; then
+    echo "warning: Codex hook script missing; skipping hooks" >&2
+    return 0
+  fi
+  mkdir -p "$CODEX_DIR"
+  if [[ -f "$HOOKS_JSON" ]] && ! codex_hooks_json_valid; then
+    echo "warning: ${HOOKS_JSON} is not valid JSON; leaving it unchanged" >&2
+    if [[ "$mode" == "strict" ]]; then
+      return 1
+    fi
+    return 0
+  fi
+  if [[ ! -f "$HOOKS_JSON" ]]; then
+    printf '%s\n' '{"hooks":{}}' >"$HOOKS_JSON"
+  fi
+  codex_write_hook_script
+  codex_write_hooks_env
+  codex_strip_hook_entries
+  codex_append_hook_groups
+  echo "Merged Subconscious Codex hooks into $HOOKS_JSON"
+  echo "Trust new hooks in Codex with /hooks (or --dangerously-bypass-hook-trust)."
+}
+
+codex_uninstall_hooks() {
+  if [[ -f "$HOOKS_JSON" ]] && codex_hooks_have_jq && codex_hooks_json_valid; then
+    codex_strip_hook_entries
+    echo "Removed Subconscious entries from $HOOKS_JSON"
+  elif [[ -f "$HOOKS_JSON" ]]; then
+    echo "warning: ${HOOKS_JSON} is not valid JSON; leaving it unchanged" >&2
+  else
+    echo "No Codex hooks.json at $HOOKS_JSON"
+  fi
+  rm -f "$HOOK_DST" "$HOOKS_ENV_FILE"
+  rm -f "${CODEX_DIR}/subconscious.env"
+}
+
+codex_hooks_status() {
+  echo "scope: user"
+  echo "codex dir: $CODEX_DIR"
+  echo "hooks.json: $HOOKS_JSON"
+  if [[ -f "$HOOKS_JSON" ]] && codex_hooks_have_jq && jq -e --arg m "$MARKER" '
+      [.hooks[]?[]?.hooks[]? | select((.command // "") | tostring | contains($m))] | length > 0
+    ' "$HOOKS_JSON" >/dev/null 2>&1; then
+    echo "hooks: installed"
+  else
+    echo "hooks: not installed"
+  fi
+  if [[ -x "$HOOK_DST" ]]; then
+    echo "hook script: $HOOK_DST (executable)"
+  else
+    echo "hook script: missing"
+  fi
+  if [[ -f "$HOOKS_ENV_FILE" ]]; then
+    echo "env: $HOOKS_ENV_FILE (present)"
+  else
+    echo "env: missing"
+  fi
+  if [[ -f "${CODEX_DIR}/config.toml" ]] && grep -q 'model_provider = "subconscious"' "${CODEX_DIR}/config.toml" 2>/dev/null; then
+    echo "legacy config.toml: contains a Subconscious provider (this CLI no longer manages that file)"
+  fi
+}

package/bin/runbook/codex/hooks.json

@@ -0,0 +1,29 @@
+{
+  "description": "Report Codex auto/manual compaction to the Subconscious API Gateway.",
+  "hooks": {
+    "PreCompact": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "HOOK_SH_PATH",
+            "timeout": 3,
+            "statusMessage": "Reporting compaction start"
+          }
+        ]
+      }
+    ],
+    "PostCompact": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "HOOK_SH_PATH",
+            "timeout": 3,
+            "statusMessage": "Reporting compaction end"
+          }
+        ]
+      }
+    ]
+  }
+}

package/bin/runbook/codex/install.sh

@@ -0,0 +1,82 @@
+#!/usr/bin/env bash
+# ── Subconscious API Gateway — Codex hooks ────────────────────────────────────
+# Merge Subconscious compaction hooks into ~/.codex/hooks.json without touching
+# ~/.codex/config.toml. Launch Codex with `subc codex`.
+#
+#   subc codex install     # merge hooks
+#   subc codex status
+#   subc codex uninstall   # strip only Subconscious hook entries
+# ─────────────────────────────────────────────────────────────────────────────
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK_SRC="${SCRIPT_DIR}/hook.sh"
+
+SHARED_ENV="${SUBC_ENV_FILE:-${SCRIPT_DIR}/../.env}"
+[[ -f "$SHARED_ENV" ]] || SHARED_ENV="${SCRIPT_DIR}/../env.example"
+if [[ -f "$SHARED_ENV" ]]; then set -a; source "$SHARED_ENV"; set +a; fi
+
+# shellcheck source=hooks-lib.sh
+source "${SCRIPT_DIR}/hooks-lib.sh"
+
+COMMAND="install"
+GATEWAY_URL="${GATEWAY_URL:-}"
+API_KEY="${CODEX_API_KEY:-${API_KEY:-}}"
+
+usage() {
+  cat <<'EOF'
+Usage:
+  subc codex install [--gateway-url URL] [--api-key KEY]
+  subc codex status
+  subc codex uninstall
+
+Merges Subconscious compaction hooks into ~/.codex/hooks.json. Does not write
+config.toml. Launch Codex with subc codex.
+EOF
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    install|uninstall|status)
+      COMMAND="$1"
+      shift
+      ;;
+    --gateway-url)
+      GATEWAY_URL="${2:-}"
+      shift 2
+      ;;
+    --api-key)
+      API_KEY="${2:-}"
+      shift 2
+      ;;
+    --model)
+      shift 2
+      ;;
+    -h|--help|help)
+      usage
+      exit 0
+      ;;
+    --)
+      shift
+      break
+      ;;
+    *)
+      echo "unknown argument: $1 (launch options belong on subc codex, not subc codex install)" >&2
+      usage >&2
+      exit 1
+      ;;
+  esac
+done
+
+case "$COMMAND" in
+  install)
+    codex_ensure_hooks strict
+    ;;
+  uninstall)
+    codex_uninstall_hooks
+    ;;
+  status)
+    codex_hooks_status
+    ;;
+esac