xuym-codex-collab 0.1.1 → 0.3.1

package/schemas/team-version.schema.json

@@ -0,0 +1,70 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:codex-collab:team-version:v1",
+  "title": "Codex Collab Signed Team Version v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "version",
+    "parent_hash",
+    "team_hash",
+    "team",
+    "actor_id",
+    "signature"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": 1
+    },
+    "version": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "parent_hash": {
+      "oneOf": [
+        {
+          "type": "null"
+        },
+        {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        }
+      ]
+    },
+    "team_hash": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "team": {
+      "$ref": "urn:codex-collab:team-policy:v2"
+    },
+    "actor_id": {
+      "type": "string",
+      "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+    },
+    "enrollment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "invite_id",
+        "request_id"
+      ],
+      "properties": {
+        "invite_id": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$"
+        },
+        "request_id": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$"
+        }
+      }
+    },
+    "signature": {
+      "type": "string",
+      "minLength": 1
+    }
+  },
+  "$comment": "Runtime verifies pinned root hash, contiguous version and parent chain, canonical team_hash, previous-admin signature, immutable existing identities and local anti-rollback checkpoint."
+}

package/scripts/peer/cli.mjs

@@ -102,8 +102,11 @@ switch (command) {
     if (command === 'list') task = await service.list();
     if (command === 'read') task = await service.read(args[0]);
     if (command === 'review') {
-      if (!['approved', 'changes_requested'].includes(args[1])) throw new Error('review task-id approved|changes_requested');
-      task = await service.report(args[0], { type: 'reviewed', decision: args[1] });
+      if (!['approved', 'changes_requested'].includes(args[1])) throw new Error('review task-id approved|changes_requested [R-<seq>] [feedback]');
+      const revision = /^R-([1-9][0-9]*)$/.exec(args[2] || '');
+      if (args[2]?.startsWith('R-') && (!revision || !Number.isSafeInteger(Number(revision[1])))) throw new Error('invalid review revision; use R-<seq> from the current notification');
+      const summary = args.slice(revision ? 3 : 2).join(' ');
+      task = await service.report(args[0], { type: 'reviewed', decision: args[1], ...(summary ? { summary } : {}) }, {}, undefined, revision ? Number(revision[1]) : undefined);
     }
     if (command === 'complete') task = await service.report(args[0], { type: 'completed' });
     if (command === 'reopen') task = await service.report(args[0], { type: 'reopened', summary: args.slice(1).join(' ') });

package/scripts/peer/onboarding.mjs

@@ -44,7 +44,7 @@ export async function readPublicKeyFile(path) {
   return key.export({ type: 'spki', format: 'pem' });
 }
 
-async function getOrCreateIdentityFiles(agentId, directory) {
+export async function getOrCreateIdentityFiles(agentId, directory) {
   if (!idPattern.test(agentId || '') || !isAbsolute(directory)) throw new Error('provide a valid agent ID and absolute identity directory');
   await mkdir(directory, { recursive: true, mode: 0o700 });
   const privatePath = join(directory, `${agentId}.private.json`);
@@ -187,7 +187,13 @@ export async function attachProject({ configPath, repoPath }) {
   const block = `[mcp_servers.${serverName}]\ncommand = ${JSON.stringify(process.execPath)}\nargs = [${JSON.stringify(join(root, 'apps/peer/mcp-main.mjs'))}, ${JSON.stringify(configPath)}]`;
   const next = mergeMcpToml(before, serverName, block);
   const excludePath = await git(repo, 'rev-parse', '--path-format=absolute', '--git-path', 'info/exclude');
-  const oldExclude = await readFile(excludePath, 'utf8');
+  let oldExclude = '';
+  let excludeExisted = true;
+  try { oldExclude = await readFile(excludePath, 'utf8'); }
+  catch (error) {
+    if (error.code !== 'ENOENT') throw error;
+    excludeExisted = false;
+  }
   const rules = [`/.codex/config.toml`, `/.agents/skills/${skillName}/`, '/.codex-collab-worktrees/'];
   const addedRules = rules.filter((rule) => !oldExclude.split(/\r?\n/).includes(rule));
   const template = await readFile(join(root, `packages/codex-kit/templates/.agents/skills/${skillName}/SKILL.md`), 'utf8');
@@ -197,12 +203,18 @@ export async function attachProject({ configPath, repoPath }) {
     await writeFile(configFile, next, { mode: 0o600 });
     await chmod(configFile, 0o600);
     await writeFile(skillFile, template, { mode: 0o600, flag: 'wx' });
-    if (addedRules.length) await writeFile(excludePath, `${oldExclude}${oldExclude.endsWith('\n') || !oldExclude ? '' : '\n'}${addedRules.join('\n')}\n`);
+    if (addedRules.length) {
+      await mkdir(dirname(excludePath), { recursive: true, mode: 0o700 });
+      await writeFile(excludePath, `${oldExclude}${oldExclude.endsWith('\n') || !oldExclude ? '' : '\n'}${addedRules.join('\n')}\n`);
+    }
   } catch (error) {
     if (before) await writeFile(configFile, before, { mode: 0o600 });
     else await rm(configFile, { force: true });
     await rm(skillDir, { recursive: true, force: true });
-    if (addedRules.length) await writeFile(excludePath, oldExclude);
+    if (addedRules.length) {
+      if (excludeExisted) await writeFile(excludePath, oldExclude);
+      else await rm(excludePath, { force: true });
+    }
     throw error;
   }
   return { repo, mcp_config: configFile, skill: skillFile };