codiedev 0.10.0-beta.1 → 0.10.0-beta.10

package/dist/captureSignals.js

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CAPTURE_SIGNALS_VERSION = void 0;
+exports.parseCaptureSignals = parseCaptureSignals;
+exports.withLaunch = withLaunch;
+const transcriptModels_1 = require("./transcriptModels");
+exports.CAPTURE_SIGNALS_VERSION = 1;
+const IDLE_MS = 5 * 60_000;
+const LIMIT = 100;
+const skillKey = (value) => typeof value === "string"
+    ? value
+        .replace(/^\//, "")
+        .replace(/\.md$/i, "")
+        .replace(/["'`]/g, "")
+        .trim()
+        .toLowerCase()
+    : "";
+function parseCaptureSignals(content, source) {
+    const timestamps = new Set();
+    const invocationCounts = new Map();
+    const invocations = new Set(), pulls = new Set(), entrypoints = new Set();
+    const tools = new Map(), calls = new Set();
+    let parsedRecords = 0, truncated = false;
+    let premiumRequests, nanoAiu;
+    let cursorSubagents;
+    const artifacts = new Map();
+    let lastInvoked = null;
+    const marker = (text) => {
+        if (!lastInvoked || artifacts.has(lastInvoked))
+            return;
+        const m = text.match(/codiedev:artifact=([a-z0-9]{16,64})/i);
+        if (m && artifacts.size < LIMIT)
+            artifacts.set(lastInvoked, m[1]);
+    };
+    const addSkill = (set, value) => {
+        const key = skillKey(value);
+        if (!key || key.length > 200 || !/^[a-z0-9][a-z0-9_:/.-]*$/i.test(key))
+            return;
+        if (set.size >= LIMIT && !set.has(key)) {
+            truncated = true;
+            return;
+        }
+        set.add(key);
+        if (set === invocations) {
+            invocationCounts.set(key, (invocationCounts.get(key) ?? 0) + 1);
+            lastInvoked = key;
+        }
+    };
+    const command = (value) => {
+        if (typeof value !== "string")
+            return;
+        for (const match of value.matchAll(/\bcodiedev\s+pull\s+([^\s"'`]+)/gi))
+            addSkill(pulls, match[1]);
+    };
+    const tool = (name, id, input) => {
+        if (typeof name !== "string" || !name || name.length > 100)
+            return;
+        const key = typeof id === "string" ? id : `${parsedRecords}:${calls.size}`;
+        if (calls.has(key))
+            return;
+        calls.add(key);
+        if (tools.size < LIMIT || tools.has(name))
+            tools.set(name, (tools.get(name) ?? 0) + 1);
+        else
+            truncated = true;
+        let args = input;
+        if (typeof args === "string") {
+            try {
+                args = JSON.parse(args);
+            }
+            catch {
+                command(args);
+                return;
+            }
+        }
+        if (name.toLowerCase() === "skill")
+            addSkill(invocations, args?.skill ?? args?.name);
+        command(args?.command ?? args?.cmd);
+    };
+    for (const record of (0, transcriptModels_1.transcriptRecords)(content, source)) {
+        if (!record || typeof record !== "object")
+            continue;
+        const e = record;
+        parsedRecords++;
+        const entrypoint = (value) => {
+            if (typeof value === "string" &&
+                entrypoints.size < 10 &&
+                /^[a-z0-9][a-z0-9_.:-]{0,39}$/i.test(value))
+                entrypoints.add(value.toLowerCase());
+        };
+        entrypoint(e.entrypoint);
+        if (e.type === "session_meta" && e.payload) {
+            const src = e.payload.source;
+            entrypoint(typeof src === "string"
+                ? `codex:${src}`
+                : src && typeof src === "object"
+                    ? `codex:${Object.keys(src)[0] ?? "other"}`
+                    : undefined);
+        }
+        if (e.type === "cursor.subagent_summary" && Number.isSafeInteger(e.count) && e.count > 0) {
+            cursorSubagents = { count: e.count, truncated: e.truncated === true };
+        }
+        if (e.type === "copilot.skill_invoked")
+            addSkill(invocations, e.skill);
+        if (e.type === "pi.skill_invoked")
+            addSkill(invocations, e.skill);
+        if (e.type === "copilot.usage_summary") {
+            if (typeof e.premiumRequests === "number" && e.premiumRequests >= 0)
+                premiumRequests = e.premiumRequests;
+            if (typeof e.nanoAiu === "number" && e.nanoAiu >= 0)
+                nanoAiu = e.nanoAiu;
+        }
+        const time = typeof e.timestamp === "string"
+            ? Date.parse(e.timestamp)
+            : e.info?.time?.created;
+        if (typeof time === "number" && Number.isFinite(time) && time > 0)
+            timestamps.add(time);
+        const blocks = e.message?.content;
+        if (Array.isArray(blocks))
+            for (const part of blocks) {
+                if (part?.type === "tool_use")
+                    tool(part.name, part.id, part.input);
+                if (part?.type === "tool_result")
+                    marker(typeof part.content === "string" ? part.content : JSON.stringify(part.content ?? ""));
+                if (part?.type === "text" && e.type === "user") {
+                    for (const match of String(part.text ?? "").matchAll(/<command-name>\/?([a-z0-9:_-]+)<\/command-name>/gi))
+                        addSkill(invocations, match[1]);
+                    marker(String(part.text ?? ""));
+                }
+            }
+        if (typeof blocks === "string" && e.type === "user") {
+            for (const match of blocks.matchAll(/<command-name>\/?([a-z0-9:_-]+)<\/command-name>/gi))
+                addSkill(invocations, match[1]);
+            marker(blocks);
+        }
+        if (e.type === "response_item" &&
+            ["function_call", "custom_tool_call"].includes(e.payload?.type))
+            tool(e.payload.name, e.payload.call_id, e.payload.arguments ?? e.payload.input);
+        if (e.info?.role === "assistant" && Array.isArray(e.parts))
+            for (const part of e.parts) {
+                if (part?.type === "tool")
+                    tool(part.tool, part.callID ?? part.id, part.state?.input);
+            }
+    }
+    const sorted = [...timestamps].sort((a, b) => a - b);
+    let activeMs = 0;
+    for (let i = 1; i < sorted.length; i++) {
+        const gap = sorted[i] - sorted[i - 1];
+        if (gap <= IDLE_MS)
+            activeMs += gap;
+    }
+    return {
+        version: exports.CAPTURE_SIGNALS_VERSION,
+        parsedRecords,
+        timestampCount: sorted.length,
+        ...(sorted.length
+            ? { firstAt: sorted[0], lastAt: sorted[sorted.length - 1] }
+            : {}),
+        activeMs,
+        idleThresholdMs: IDLE_MS,
+        skillInvocations: [...invocations].sort(),
+        skillInvocationCounts: [...invocationCounts]
+            .map(([skill, count]) => ({ skill, count }))
+            .sort((a, b) => a.skill.localeCompare(b.skill)),
+        ...(artifacts.size
+            ? { skillInvocationArtifacts: [...artifacts].map(([skill, artifactId]) => ({ skill, artifactId })).sort((a, b) => a.skill.localeCompare(b.skill)) }
+            : {}),
+        skillPulls: [...pulls].sort(),
+        toolCalls: [...tools]
+            .map(([name, calls]) => ({ name, calls }))
+            .sort((a, b) => a.name.localeCompare(b.name)),
+        ...(cursorSubagents ? { subagents: cursorSubagents } : {}),
+        ...(entrypoints.size ? { entrypoints: [...entrypoints].sort() } : {}),
+        ...(premiumRequests !== undefined ? { premiumRequests } : {}),
+        ...(nanoAiu !== undefined ? { nanoAiu } : {}),
+        truncated,
+    };
+}
+function withLaunch(signals, launch) {
+    if (!launch || !/^[a-z0-9][a-z0-9_.:-]{0,39}$/.test(launch))
+        return signals;
+    const all = new Set([...(signals.entrypoints ?? []), launch]);
+    return all.size > 10 ? signals : { ...signals, entrypoints: [...all].sort() };
+}

package/dist/cli.js

@@ -1,21 +1,9 @@
 #!/usr/bin/env node
 "use strict";
-/**
- * Codiedev CLI dispatcher.
- *
- * Subcommands:
- *   codiedev connect                   — link agent CLIs to your org
- *   codiedev push <file>               — author/update a spec/review/decision/etc.
- *   codiedev pull <key>                — fetch an artifact by filename key
- *   codiedev ping <user> "<msg>"       — send a message (optionally --with <key>)
- *   codiedev inbox                     — list pings (use --unread to filter)
- *   codiedev read <ping-id>            — mark read + show full message
- *   codiedev note "<text>"             — capture a thought
- *   codiedev promote <artifact-id>     — promote an extracted artifact to authored
- *   codiedev help                      — show this help
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 const connect_1 = require("./connect");
+const cliSession_1 = require("./cliSession");
+const utils_1 = require("./utils");
 const push_1 = require("./commands/push");
 const delete_1 = require("./commands/delete");
 const pull_1 = require("./commands/pull");
@@ -23,17 +11,19 @@ const ask_1 = require("./commands/ask");
 const ping_1 = require("./commands/ping");
 const inbox_1 = require("./commands/inbox");
 const note_1 = require("./commands/note");
-const promote_1 = require("./commands/promote");
-const reverseTicket_1 = require("./commands/reverseTicket");
 const createTicket_1 = require("./commands/createTicket");
 const doctor_1 = require("./commands/doctor");
 const search_1 = require("./commands/search");
 const library_1 = require("./commands/library");
 const share_1 = require("./commands/share");
 const send_1 = require("./commands/send");
-const react_1 = require("./commands/react");
 const capture_1 = require("./commands/capture");
-const security_1 = require("./commands/security");
+const pack_1 = require("./commands/pack");
+const traces_1 = require("./commands/traces");
+const agents_1 = require("./commands/agents");
+const evals_1 = require("./commands/evals");
+const hookGate_1 = require("./packs/hookGate");
+const sync_1 = require("./packs/sync");
 const version_1 = require("./version");
 const HELP = `
 Codiedev CLI
@@ -43,14 +33,11 @@ Codiedev CLI
   someone left off across sessions and providers.
 
 Connect:
-  codiedev connect                       Link Claude Code / Codex / Cursor to your org
-  codiedev doctor                        Verify setup, capture, and Agent Security
-  codiedev security pilot                Run safe synthetic policy checks
-  codiedev security inventory            Inventory MCPs, skills, hooks, plugins,
-                                         instructions, and editor extensions
-  codiedev security scan --deep          Run installed open-source scanners too
-  codiedev security sync                 Fetch administrator policy locally
-  codiedev security rollback --yes       Restore pre-update hook configuration
+  codiedev connect                       Sign in with your browser and link
+                                         Claude Code / Codex / Cursor /
+                                         GitHub Copilot / pi to your org
+  codiedev logout                        Sign this machine out
+  codiedev doctor                        Verify setup and capture
 
 Harness:
   codie                                  Launch the governed Codie harness.
@@ -70,14 +57,6 @@ Artifacts:
                                          team's collective memory. Returns an
                                          LLM-synthesized answer with citations
                                          pointing at sessions + artifacts.
-  codiedev promote <artifact-id>         Promote an auto-extracted artifact
-                                         to an authored one
-  codiedev reverse-ticket [<pr-url>]     Generate a Jira ticket draft.
-                                         No URL = branch mode (uses your current
-                                         local git branch, no PR needed).
-                                         Draft lands in /portal/agentic-ticketing.
-  codiedev reverse-ticket --base <ref>   Override the base ref in branch mode
-                                         (defaults to origin/main).
   codiedev create-ticket [<prompt>]      Forward-write a scoped ticket plan.
                                          Claude investigates the codebase, asks
                                          "single repo or multiple? where?", then
@@ -96,6 +75,30 @@ Messaging:
   codiedev inbox [--unread] [--limit N]  Show messages
   codiedev read <ping-id>                Mark read + show full message
 
+Starter packs:
+  codiedev pack list                     Packs assigned to your team
+  codiedev pack install [slug] [--harness claude,codex,copilot,cursor,codie,pi]
+                       [--dry-run] [--json]
+                                         Install a pack (or all) into every
+                                         detected tool
+  codiedev pack status                   Installed packs, up to date or not
+
+Traces (agents on the gateway):
+  codiedev agents init | deploy | run | runs | show | secrets | webhook
+                                         Deploy agents and run them in fresh sandboxes
+                                         (codiedev agents help)
+  codiedev traces agents                 Agents you maintain, with saved test cases
+  codiedev traces cases <agent> [--dataset name [--version n]] [--model id]
+                                         Pull an agent's test cases (or one dataset)
+                                         into this repo for your coding agent to
+                                         run, optionally on another model
+  codiedev traces report <results.json>  Send the results back to Traces
+  codiedev traces overview | runs | run | score | scores | score-kinds | queue | judge | import | add-example | versions | save-version
+                                         Agents, runs, failures, scores, review queues,
+                                         automatic scoring and datasets (codiedev traces help)
+  codiedev evals report <run.json>       File one variant's eval scores under an experiment
+  codiedev evals last <subject>          Latest experiment on a subject + its champion
+
 Discovery:
   codiedev search "<query>"              Semantic search across the team's
                                          captured sessions and artifacts
@@ -103,9 +106,6 @@ Discovery:
                   [--type T] [--tag X] [--limit N]
                                          List artifacts in your workspace
 
-Feed:
-  codiedev react <postId> <emoji>        Toggle a reaction on a feed post
-
 Privacy:
   codiedev ignore <path>                 Never capture this folder or its children
   codiedev unignore <path>               Stop ignoring a folder
@@ -159,21 +159,49 @@ locally before any capture leaves your machine, so an offline or failed portal
 status sync never weakens it.
 `.trim();
 const COMMAND_HELP = {
+    pack: pack_1.PACK_HELP,
+    traces: traces_1.TRACES_HELP,
+    agents: agents_1.AGENTS_HELP,
+    evals: evals_1.EVALS_HELP,
     connect: `
 codiedev connect — link your agent CLI to Codiedev
 
-  Interactive setup. Prompts for an API token, then installs:
-    - ~/.codiedev/config.json            (token + org + tracked repos)
+  Opens your browser to sign in (approve once, no API key to copy), then
+  installs:
+    - ~/.codiedev/config.json            (sign-in + org + tracked repos)
     - ~/.claude/settings.json hook       (captures session transcripts)
     - ~/.claude/CLAUDE.md instructions   (teaches Claude the commands)
     - ~/.codex/hooks.json hook           (same, for Codex)
     - ~/.codex/AGENTS.md instructions    (same, for Codex)
-    - ~/.cursor/hooks.json hooks         (session, prompt, security, capture)
+    - ~/.cursor/hooks.json hooks         (session, backup, capture)
     - ~/.cursor/rules/codiedev.mdc       (teaches Cursor the commands)
+    - ~/.copilot/hooks/codiedev.json     (GitHub Copilot: VS Code + CLI capture)
+    - ~/.pi/agent/extensions/codiedev.ts (pi: session, prompt, capture)
+    - ~/.pi/agent/AGENTS.md              (teaches pi the commands)
 
   Re-run anytime to swap accounts or refresh the instruction block.
 
-  Get your token: https://codiedev.com/portal/integrations/claude-code
+  Over SSH or on a machine with no display it shows a link and a short code
+  instead: open the link on your laptop or phone, check the code, approve.
+  Detected automatically.
+
+  Options:
+    --token        Paste an API token instead of signing in with a browser
+                   (CI, or a machine with no browser anywhere). Create one at
+                   https://codiedev.com/portal/integrations/claude-code
+    --force, -f    Sign in again even if this machine is already connected.
+
+  Browser sign-in stores a 24-hour access token and a refresh token that
+  rotates on every use; nothing long-lived is saved. Revoke a machine from
+  Integrations in the portal, or run 'codiedev logout' on it.
+`.trim(),
+    logout: `
+codiedev logout — sign this machine out
+
+  Ends this machine's browser sign-in on the server and removes it from
+  ~/.codiedev/config.json. Device settings (ignored folders) are kept.
+  For a pasted API token, it's only forgotten locally: revoke it in the
+  portal under Integrations.
 `.trim(),
     push: `
 codiedev push — author or update an artifact
@@ -275,20 +303,6 @@ codiedev note — capture a passing thought, linked to your session
     unignore: IGNORE_HELP,
     ignored: IGNORE_HELP,
     capture: IGNORE_HELP,
-    promote: `
-codiedev promote — promote an auto-extracted artifact to authored
-
-  Usage:
-    codiedev promote <artifact-id> [--key filename.md]
-
-  The session-capture pipeline auto-extracts spec/bugfix/decision
-  artifacts from each agent session. Promote turns one of those into
-  a first-class authored artifact your team can ping, pull, and
-  update versions of.
-
-  Find artifact-ids in the portal under Knowledge → Memory, or via
-  the portal search.
-`.trim(),
     "create-ticket": `
 codiedev create-ticket — forward-write a scoped ticket plan
 
@@ -406,16 +420,37 @@ Run 'codiedev help <command>' for each, or see the quick list:
 
     codiedev help
 
-## Getting a token
+## Signing in
 
-  1. Log in to https://codiedev.com/portal/integrations/claude-code
-  2. Click "Create token"
-  3. Copy the cdv_... string and paste it into 'codiedev connect'
+  'codiedev connect' opens your browser; approve, and you're done. Nothing
+  long-lived is stored: a 24-hour access token plus a rotating refresh token.
 
-Tokens are per-user. Rotate any time by revoking + creating a new one.
+  Over SSH it shows a link and code to approve from your laptop or phone,
+  automatically. For CI, create a token at
+  https://codiedev.com/portal/integrations/claude-code and run
+  'codiedev connect --token'.
 `.trim();
+const REMOVED_COMMANDS = {
+    promote: "Share an auto-saved spec with 'Promote to team' in the portal's My artifacts list.",
+    "reverse-ticket": "Use 'codiedev create-ticket' to draft Jira tickets.",
+    reverseTicket: "Use 'codiedev create-ticket' to draft Jira tickets.",
+    react: "React to feed posts in the portal.",
+};
+function removedCommand(command) {
+    console.error(`'codiedev ${command}' has been removed. ${REMOVED_COMMANDS[command] ?? ""}`.trim());
+    process.exit(1);
+}
 async function main() {
     const [, , command, ...rest] = process.argv;
+    if (command === "hook-gate") {
+        (0, hookGate_1.runHookGateCli)(rest);
+        return;
+    }
+    if (command && !["pack", "packs", "help", "docs", "version", "--version", "-v", "--help", "-h"].includes(command) && !rest.includes("--json")) {
+        const nag = (0, sync_1.packNagLine)();
+        if (nag)
+            console.error(`\n${nag}\n`);
+    }
     if (!command || command === "--help" || command === "-h") {
         console.log(HELP);
         return;
@@ -438,7 +473,6 @@ async function main() {
         console.log(DOCS);
         return;
     }
-    // Support `codiedev <command> --help` too.
     if (rest.includes("--help") || rest.includes("-h")) {
         if (COMMAND_HELP[command]) {
             console.log(COMMAND_HELP[command]);
@@ -449,18 +483,40 @@ async function main() {
         console.log(`codiedev v${version_1.CLI_VERSION}`);
         return;
     }
+    if (command !== "connect" && command !== "logout") {
+        const fresh = await (0, cliSession_1.ensureFreshToken)({ configPath: utils_1.CONFIG_PATH }).catch(() => null);
+        if (fresh?.status === "signed_out") {
+            console.error("\nYour Codiedev sign-in has ended (revoked or expired). Run `codiedev connect` to sign in again.\n");
+        }
+    }
     try {
         switch (command) {
             case "connect":
                 await (0, connect_1.runConnect)(rest);
                 return;
+            case "session-refresh": {
+                await (0, cliSession_1.ensureFreshToken)({ configPath: utils_1.CONFIG_PATH }, 60 * 60_000).catch(() => null);
+                return;
+            }
+            case "logout": {
+                const out = await (0, cliSession_1.logout)({ configPath: utils_1.CONFIG_PATH });
+                if (!out.wasConnected) {
+                    console.log("This machine isn't signed in.");
+                }
+                else if (out.hadBrowserAuth) {
+                    console.log(out.serverRevoked
+                        ? "Signed out. This machine's sign-in is revoked."
+                        : "Signed out on this machine. Couldn't reach Codiedev to revoke the sign-in; revoke it under Integrations in the portal.");
+                }
+                else {
+                    console.log("Removed the API token from this machine. It still works elsewhere until you revoke it under Integrations in the portal.");
+                }
+                return;
+            }
             case "doctor":
             case "verify":
                 await (0, doctor_1.runDoctor)(rest);
                 return;
-            case "security":
-                await (0, security_1.runSecurityCommand)(rest);
-                return;
             case "push":
                 await (0, push_1.runPush)(rest);
                 return;
@@ -479,7 +535,6 @@ async function main() {
                 return;
             case "inbox":
             case "check":
-                // Support `codiedev check inbox` as an alias.
                 if (command === "check" && rest[0] === "inbox") {
                     await (0, inbox_1.runInbox)(rest.slice(1));
                 }
@@ -494,11 +549,10 @@ async function main() {
                 await (0, note_1.runNote)(rest);
                 return;
             case "promote":
-                await (0, promote_1.runPromote)(rest);
-                return;
             case "reverse-ticket":
             case "reverseTicket":
-                await (0, reverseTicket_1.runReverseTicket)(rest);
+            case "react":
+                removedCommand(command);
                 return;
             case "create-ticket":
             case "createTicket":
@@ -511,22 +565,31 @@ async function main() {
             case "ls":
                 await (0, library_1.runLibrary)(rest);
                 return;
+            case "traces":
+                await (0, traces_1.runTraces)(rest);
+                return;
+            case "agents":
+                await (0, agents_1.runAgents)(rest);
+                return;
+            case "evals":
+                await (0, evals_1.runEvals)(rest);
+                return;
             case "share":
                 await (0, share_1.runShare)(rest);
                 return;
             case "send":
                 await (0, send_1.runSend)(rest);
                 return;
-            case "react":
-                await (0, react_1.runReact)(rest);
-                return;
             case "ignore":
             case "unignore":
             case "ignored":
                 await (0, capture_1.runCaptureCommand)([command, ...rest]);
                 return;
+            case "pack":
+            case "packs":
+                await (0, pack_1.runPack)(rest);
+                return;
             case "capture":
-                // Back-compat alias for the earlier `codiedev capture <sub>` form.
                 await (0, capture_1.runCaptureCommand)(rest);
                 return;
             default: