@darkhunt-security/endpoint-codex 0.9.2 → 0.9.3

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "darkhunt-guard",
-  "version": "0.9.2",
+  "version": "0.9.3",
   "hooks": "./hooks/hooks.json",
   "description": "Darkhunt endpoint plugin for Codex CLI \u2014 full session trace capture and PreToolUse guardrails.",
   "author": {

package/README.md

@@ -44,6 +44,18 @@ to write. Enrolment writes them; a pasted config cannot. Run this once after pas
 `/darkhunt-guard:status` reports the launchers, so you never have to take this on trust —
 a machine missing them looks perfectly configured everywhere else and captures nothing.
 
+## Upgrade
+
+```
+codex plugin add darkhunt-guard@darkhunt
+```
+
+Re-adding re-resolves the published version. The new one loads on your **next** Codex
+CLI session, and the launchers need no attention — they resolve the newest installed
+version at run time. `/darkhunt-guard:status` prints the version actually running,
+which is the only reliable answer: an update that resolved against a registry without
+the new version reports success and changes nothing.
+
 ## What it captures
 
 The session transcript, mapped to spans: user and assistant messages, thinking blocks,

package/dist/bin/status.mjs

@@ -2,6 +2,11 @@
 import { createRequire as __dhCreateRequire } from 'node:module';
 const require = __dhCreateRequire(import.meta.url);
 
+// adapters/codex/bin/status.mjs
+import { readFileSync as readFileSync7 } from "node:fs";
+import { dirname, join as join11 } from "node:path";
+import { fileURLToPath } from "node:url";
+
 // packages/core/dist/config/local.js
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { join as join3 } from "node:path";
@@ -1380,6 +1385,13 @@ try {
   const s = status("codex", codexTranscript);
   const n = (x) => x.toLocaleString();
   console.log(`darkhunt endpoint status \u2014 codex`);
+  const root = join11(dirname(fileURLToPath(import.meta.url)), "..", "..");
+  let installed = "unknown";
+  try {
+    installed = JSON.parse(readFileSync7(join11(root, "package.json"), "utf8")).version;
+  } catch {
+  }
+  console.log(`  plugin       ${installed}   ${root}`);
   console.log(`  profile      ${s.profile}  ->  ${s.baseUrl}`);
   console.log(`  tenant       ${s.tenantId}   workspace ${s.workspaceId}`);
   console.log(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darkhunt-security/endpoint-codex",
-  "version": "0.9.2",
+  "version": "0.9.3",
   "type": "module",
   "description": "Darkhunt endpoint adapter for Codex CLI: hook codec, rollout transcript mapper, plugin manifest.",
   "bin": {