fix: drop removed codex plugin hooks flag

Author: rldyourmnd

CHANGELOG.md

@@ -12,6 +12,9 @@ The format follows Keep a Changelog, and marketplace/plugin versions follow Sema
   checks use current profile files (`$CODEX_HOME/rldyour-yolo.config.toml` and
   `$CODEX_HOME/rldyour-safe.config.toml`) instead of removed legacy
   `profile = "..."` selectors and `[profiles.*]` tables.
+- System install and doctor now remove the obsolete `features.plugin_hooks`
+  flag because Codex 0.134 reports plugin hooks as default-enabled; hook
+  correctness is verified through trusted `hooks/list` output.
 - Context7 MCP now pins `@upstash/context7-mcp@3.0.0`, matching the current
   npm stable package in `.mcp.json` and `config/mcp-runtime-versions.env`.
 

config/rldyour-contract.json

@@ -83,7 +83,8 @@
     }
   },
   "hooks": {
-    "plugin_hooks_required": true,
+    "plugin_hooks_required": false,
+    "plugin_hooks_default_enabled": true,
     "handler_type": "command",
     "lifecycles": {
       "prompt.submit.sync-required": {

docs/contract-matrix.md

@@ -33,9 +33,10 @@ the human-readable matrix for the same facts.
 
 ## Hook Lifecycle Mapping
 
-Codex bundled plugin hooks require `[features].plugin_hooks = true`. Hook
-handlers are command handlers and resolve plugin-owned scripts through
-`PLUGIN_ROOT`.
+Codex 0.134 reports `plugin_hooks` as a removed feature flag; bundled plugin
+hooks are default-enabled through the plugin runtime and verified with trusted
+`hooks/list` output. Hook handlers are command handlers and resolve
+plugin-owned scripts through `PLUGIN_ROOT`.
 
 | Lifecycle contract | Plugin | Codex event | Script |
 | --- | --- | --- | --- |

references/codex-baseline.json

@@ -11,8 +11,9 @@
     "runtime_contract": {
       "hooks": "command-only",
       "hooks_enabled_by_default": true,
-      "plugin_hooks_feature_flag": "features.plugin_hooks",
-      "plugin_hooks_required": true,
+      "plugin_hooks_feature_flag": null,
+      "plugin_hooks_required": false,
+      "plugin_hooks_default_enabled": true,
       "matching_command_hooks_may_run_concurrently": true
     },
     "owner_runtime_policy": {

scripts/doctor_system_codex.sh

@@ -197,10 +197,10 @@ checks.append(("repo trusted", project.get("trust_level") == "trusted"))
 
 features = config_data.get("features") or {}
 checks.append(("hooks feature enabled", features.get("hooks") is True))
-checks.append(("plugin hooks feature enabled", features.get("plugin_hooks") is True))
 checks.append(("multi-agent feature enabled", features.get("multi_agent") is True))
 deprecated_feature_keys = {
     "codex_hooks",
+    "plugin_hooks",
     "use_legacy_landlock",
     "web_search",
     "web_search_cached",

scripts/install_system_codex.sh

@@ -21,7 +21,7 @@ Managed state:
 - rldyour-codex marketplace registration
 - enabled rldyour plugins plus curated GitHub and Gmail plugins
 - hooks feature flag
-- plugin hooks feature flag
+- plugin hook trust state
 - multi-agent feature flag
 - Codex config deprecated-key migration for managed global setup
 - owner-standard YOLO/full-auto permission defaults by default
@@ -422,7 +422,6 @@ in_memories = False
 features_table_seen = False
 feature_dotted_lines: list[str] = []
 hooks_written = False
-plugin_hooks_written = False
 multi_agent_written = False
 memories_external_context_written = "disable_on_external_context" in existing_memories
 current_header: str | None = None
@@ -443,6 +442,7 @@ deprecated_root_keys = {
     "experimental_use_unified_exec_tool",
 }
 deprecated_feature_keys = {
+    "plugin_hooks",
     "use_legacy_landlock",
     "web_search",
     "web_search_cached",
@@ -534,13 +534,10 @@ out.append("")
 
 
 def append_managed_features() -> None:
-    global hooks_written, plugin_hooks_written, multi_agent_written
+    global hooks_written, multi_agent_written
     if not hooks_written:
         out.append("hooks = true")
         hooks_written = True
-    if not plugin_hooks_written:
-        out.append("plugin_hooks = true")
-        plugin_hooks_written = True
     if not multi_agent_written:
         out.append("multi_agent = true")
         multi_agent_written = True
@@ -637,9 +634,6 @@ for raw_line in existing.splitlines():
                 hooks_written = True
             continue
         if feature_key == "plugin_hooks":
-            if not plugin_hooks_written:
-                out.append("plugin_hooks = true")
-                plugin_hooks_written = True
             continue
         if feature_key == "multi_agent":
             if not multi_agent_written:

scripts/smoke_codex_hooks_migration.sh

@@ -181,10 +181,9 @@ features = data.get("features") or {}
 
 if features.get("hooks") is not True:
     raise SystemExit(f"{case_name}: expected [features].hooks = true, got {features!r}")
-if features.get("plugin_hooks") is not True:
-    raise SystemExit(f"{case_name}: expected [features].plugin_hooks = true, got {features!r}")
 deprecated_features = {
     "codex_hooks",
+    "plugin_hooks",
     "use_legacy_landlock",
     "web_search",
     "web_search_cached",

scripts/validate_contract.py

@@ -161,11 +161,14 @@ def main() -> int:
     if not isinstance(hooks, dict):
         errors.append("hooks: expected object")
     else:
-        if hooks.get("plugin_hooks_required") is not True:
-            errors.append("hooks.plugin_hooks_required must be true")
+        if hooks.get("plugin_hooks_required") is not False:
+            errors.append("hooks.plugin_hooks_required must be false for current Codex")
+        if hooks.get("plugin_hooks_default_enabled") is not True:
+            errors.append("hooks.plugin_hooks_default_enabled must be true for current Codex")
         for script in ("scripts/install_system_codex.sh", "scripts/doctor_system_codex.sh"):
-            if "plugin_hooks" not in (ROOT / script).read_text(encoding="utf-8"):
-                errors.append(f"{script}: must enforce/check features.plugin_hooks")
+            script_text = (ROOT / script).read_text(encoding="utf-8")
+            if 'plugin_hooks = true' in script_text or 'features.get("plugin_hooks") is True' in script_text:
+                errors.append(f"{script}: must not write or require removed features.plugin_hooks")
         expected_handler_type = hooks.get("handler_type")
         for plugin in ("rldyour-flow", "rldyour-serena-mcp"):
             for event, handler in iter_hook_handlers(hook_manifest(plugin)):

system/AGENTS.md

@@ -143,7 +143,7 @@ For edits, prefer Serena symbol tools when supported. Use `apply_patch` for manu
 
 The canonical source for this global setup is the `rldyour-codex` repository.
 
-System Codex installs the owner-standard full-auto profile by default with the official Codex config schema hint, `approval_policy = "never"`, `sandbox_mode = "danger-full-access"`, `default_permissions = ":danger-full-access"`, `model = "gpt-5.5"`, `model_reasoning_effort = "xhigh"`, `suppress_unstable_features_warning = true`, managed subagents on `gpt-5.5`/`medium` with temporary specialist-MCP isolation, and `[features].hooks = true`, `[features].plugin_hooks = true`, plus `[features].multi_agent = true`. Current Codex profile selection uses `$CODEX_HOME/<name>.config.toml`, so the installer writes `rldyour-yolo.config.toml` and `rldyour-safe.config.toml` and must not write legacy `profile = "..."` selectors or `[profiles.*]` tables. The owner-standard mode is also referred to as YOLO mode, full-auto mode, and dangerously-skip-permissions mode. `scripts/install_system_codex.sh --apply --safe-mode` is the explicit conservative override and selects `approval_policy = "on-request"` and `sandbox_mode = "workspace-write"` only when the owner intentionally asks for that posture. Current Codex documentation treats `sandbox_mode` as the active older sandbox model when present, so do not migrate this owner profile to beta permission profiles without an explicit policy decision. Current Codex CLI keeps plugin-bundled hooks behind `plugin_hooks`, so the flag is intentionally explicit. Deprecated config aliases such as `codex_hooks`, legacy `features.web_search*`, `experimental_instructions_file`, `background_terminal_timeout`, `experimental_use_unified_exec_tool`, `memories.no_memories_if_mcp_or_web_search`, `use_legacy_landlock`, legacy `profile`, and legacy `[profiles.*]` must not be present. Continue to avoid destructive actions unless the owner explicitly requests them.
+System Codex installs the owner-standard full-auto profile by default with the official Codex config schema hint, `approval_policy = "never"`, `sandbox_mode = "danger-full-access"`, `default_permissions = ":danger-full-access"`, `model = "gpt-5.5"`, `model_reasoning_effort = "xhigh"`, `suppress_unstable_features_warning = true`, managed subagents on `gpt-5.5`/`medium` with temporary specialist-MCP isolation, and `[features].hooks = true` plus `[features].multi_agent = true`. Current Codex profile selection uses `$CODEX_HOME/<name>.config.toml`, so the installer writes `rldyour-yolo.config.toml` and `rldyour-safe.config.toml` and must not write legacy `profile = "..."` selectors or `[profiles.*]` tables. The owner-standard mode is also referred to as YOLO mode, full-auto mode, and dangerously-skip-permissions mode. `scripts/install_system_codex.sh --apply --safe-mode` is the explicit conservative override and selects `approval_policy = "on-request"` and `sandbox_mode = "workspace-write"` only when the owner intentionally asks for that posture. Current Codex documentation treats `sandbox_mode` as the active older sandbox model when present, so do not migrate this owner profile to beta permission profiles without an explicit policy decision. Current Codex 0.134 reports `plugin_hooks` as a removed feature flag; plugin hook availability is default-enabled and verified through trusted `hooks/list` output instead of a config flag. Deprecated config aliases such as `codex_hooks`, `plugin_hooks`, legacy `features.web_search*`, `experimental_instructions_file`, `background_terminal_timeout`, `experimental_use_unified_exec_tool`, `memories.no_memories_if_mcp_or_web_search`, `use_legacy_landlock`, legacy `profile`, and legacy `[profiles.*]` must not be present. Continue to avoid destructive actions unless the owner explicitly requests them.
 
 System install and doctor checks derive rldyour plugin enablement from `.agents/plugins/marketplace.json`, the Codex adapter surface from `config/rldyour-contract.json`, and MCP server registration from `plugins/rldyour-mcps/.mcp.json`; do not add parallel hardcoded plugin or MCP lists. The installer syncs plugin cache into versioned `${CODEX_HOME:-$HOME/.codex}/plugins/cache/rldyour-codex/<plugin>/<version>` directories first, installs managed Codex execpolicy rules from `system/rules/*.rules` into `${CODEX_HOME:-$HOME/.codex}/rules/*.rules`, then refreshes installed rldyour plugin hook trust hashes through the app-server RPC method `hooks/list` over `codex app-server --listen stdio://`; doctor and runtime smoke verify that all installed rldyour plugin hooks are live, enabled, trusted, and that managed rules are in sync.