codiedev 0.10.0-beta.1 → 0.10.0-beta.11

package/dist/version.js

@@ -1,10 +1,4 @@
 "use strict";
-// Resolves the running CLI version. Read once at startup so subsequent
-// auth calls don't pay an fs.readFile per request.
-//
-// We could `import packageJson from "../package.json"` but that requires
-// `resolveJsonModule` and emits the JSON into dist. Reading at runtime
-// keeps the bundle smaller and works regardless of tsconfig settings.
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -43,9 +37,6 @@ exports.CLI_VERSION = void 0;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 function resolveCliVersion() {
-    // dist/version.js sits alongside dist/cli.js. The package.json is one
-    // directory up from dist/, i.e. `../package.json` relative to this file.
-    // In TS source we're at src/version.ts so the path is `../package.json`.
     const candidates = [
         path.join(__dirname, "..", "package.json"),
         path.join(__dirname, "..", "..", "package.json"),
@@ -59,7 +50,6 @@ function resolveCliVersion() {
             }
         }
         catch {
-            // try next candidate
         }
     }
     return "0.0.0";

package/dist/versionCheck.js

@@ -1,8 +1,4 @@
 "use strict";
-// Pure version-comparison helpers for the "is your CLI outdated" warning.
-// The IO (fetching npm registry, reading/writing the cache file) lives in
-// connect.ts/doctor.ts and is exercised by manual smoke. Keeping the policy
-// pure means the truth table is unit-testable without mocking fetch or fs.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseSemver = parseSemver;
 exports.compareSemver = compareSemver;
@@ -19,13 +15,6 @@ function parseSemver(input) {
         return null;
     return { major: Number(m[1]), minor: Number(m[2]), patch: Number(m[3]) };
 }
-/**
- * Returns -1 if a < b, 0 if equal, 1 if a > b.
- *
- * Malformed input on either side returns 0 — we never want to nag a user
- * because of garbage version strings (corrupt cache, registry returned
- * something weird, prerelease format we don't recognize).
- */
 function compareSemver(a, b) {
     const pa = parseSemver(a);
     const pb = parseSemver(b);
@@ -39,25 +28,11 @@ function compareSemver(a, b) {
         return pa.patch < pb.patch ? -1 : 1;
     return 0;
 }
-/**
- * Warning policy: only show when we have a known-newer `latest` from a
- * recent-enough cache. Stale-cache freshness is enforced by the *caller*
- * (which decides whether to refetch); this helper takes the cache state
- * as-given and answers a single question — should the user see a nag?
- */
 function shouldShowUpdateWarning(input) {
     if (!input.latest)
         return false;
     return compareSemver(input.current, input.latest) === -1;
 }
-/**
- * npx       — running from npm's _npx cache; nothing to upgrade in place.
- * container — baked into an image; the honest fix is rebuilding it.
- * global    — a real install directory we can write to. Upgradable.
- * readonly  — a real install directory we cannot write to (root-owned global
- *             on a shared box, read-only mount). Needs sudo, so print rather
- *             than attempt an upgrade that would EACCES.
- */
 function resolveInstallKind(deps) {
     if (/[\\/](?:_npx|\.npm[\\/]_npx)[\\/]/.test(deps.dirname))
         return "npx";
@@ -71,10 +46,8 @@ function resolveInstallKind(deps) {
         }
     }
     catch {
-        // not Linux, or no procfs — fall through to the writability probe
     }
     try {
-        // 2 = fs.constants.W_OK, inlined so this module stays fs-free.
         deps.accessSync(deps.dirname, 2);
         return "global";
     }
@@ -94,12 +67,6 @@ function upgradeCommand(kind, pkg = "codiedev") {
             return `npm i -g ${pkg}@latest`;
     }
 }
-/**
- * `promptedAt` makes a decline stick until the next window instead of asking
- * on every launch. It is deliberately not keyed to a dismissed version:
- * somebody who says no today should be asked again tomorrow, not silently
- * stranded on that version forever.
- */
 function decideUpdateAction(input) {
     const command = upgradeCommand(input.installKind, input.pkg);
     const ttl = input.cacheTtlMs ?? 24 * 60 * 60 * 1000;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codiedev",
-  "version": "0.10.0-beta.1",
+  "version": "0.10.0-beta.11",
   "description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness",
   "bin": {
     "codiedev": "dist/cli.js",
@@ -12,13 +12,12 @@
     "dev": "tsc --watch",
     "prepublishOnly": "tsc",
     "test": "vitest run",
-    "test:functional": "vitest run src/__tests__/limitEvent.functional.test.ts src/__tests__/harnessParity.functional.test.ts src/__tests__/cursorParity.functional.test.ts",
-    "test:harness-parity": "vitest run src/__tests__/harnessParity.functional.test.ts src/__tests__/cursorParity.functional.test.ts",
+    "test:functional": "vitest run src/__tests__/limitEvent.functional.test.ts src/__tests__/harnessParity.functional.test.ts src/__tests__/cursorParity.functional.test.ts src/__tests__/copilotCapture.functional.test.ts src/__tests__/piCapture.functional.test.ts",
+    "test:harness-parity": "vitest run src/__tests__/harnessParity.functional.test.ts src/__tests__/cursorParity.functional.test.ts src/__tests__/copilotCapture.functional.test.ts src/__tests__/piCapture.functional.test.ts",
     "test:harness-binaries": "node scripts/checkHarnessBinaries.mjs",
-    "test:security-beta": "vitest run src/__tests__/security.test.ts src/__tests__/securityCommandEntitlement.test.ts src/__tests__/securityDeepScan.test.ts src/__tests__/securityDoctor.test.ts src/__tests__/securityEntitlementInstall.test.ts src/__tests__/securityFeature.test.ts src/__tests__/securityInstall.test.ts src/__tests__/securityInventory.test.ts src/__tests__/securityPilot.test.ts src/__tests__/securityPolicy.test.ts src/__tests__/securitySession.test.ts src/__tests__/codexHookTrust.test.ts src/__tests__/codieSecurityAdapterWiring.test.ts src/__tests__/limitEvent.functional.test.ts && tsc && node dist/cli.js security pilot --json",
-    "test:security-pilot": "vitest run src/__tests__/security.test.ts src/__tests__/securityInstall.test.ts src/__tests__/securityPilot.test.ts src/__tests__/codieSecurityAdapterWiring.test.ts && tsc && node dist/cli.js security pilot --json",
     "test:opencode-attribution": "vitest run src/__tests__/repoResolver.test.ts src/__tests__/openCodeCapture.test.ts src/__tests__/openCodePluginGitRefs.test.ts src/__tests__/capturePayloadFinal.test.ts src/__tests__/captureDirectUpload.test.ts src/__tests__/resolveCaptureFinal.test.ts && tsc",
-    "test:watch": "vitest"
+    "test:watch": "vitest",
+    "test:metadata-parity": "vitest run src/__tests__/sourceMetadataMatrix.test.ts src/__tests__/copilotCapture.functional.test.ts src/__tests__/copilotCapture.test.ts src/__tests__/piCapture.functional.test.ts src/__tests__/piHooks.test.ts src/__tests__/cursorParity.functional.test.ts src/__tests__/nativeSourceParity.test.ts src/__tests__/harnessParity.functional.test.ts src/__tests__/subagents.test.ts src/__tests__/transcriptModels.test.ts src/__tests__/captureRetry.test.ts src/__tests__/limitEvent.functional.test.ts src/__tests__/captureExclusions.test.ts"
   },
   "files": [
     "dist",
@@ -57,14 +56,14 @@
   "devDependencies": {
     "@types/node": "^20.0.0",
     "typescript": "^5.4.0",
-    "vitest": "^3.2.6"
+    "vitest": "^4.1.11"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0"
   },
   "overrides": {
-    "@hono/node-server": "^2.0.12",
-    "ip-address": "^10.4.0",
+    "@hono/node-server": "^2.1.5",
+    "ip-address": "^10.7.4",
     "esbuild": "^0.28.1"
   }
 }

package/dist/backup/cache.d.ts

@@ -1,14 +0,0 @@
-import * as fs from "fs";
-export type HashCache = Record<string, string>;
-export interface Candidate {
-    rel: string;
-    hash: string;
-    abs?: string;
-}
-export declare function cacheKey(repoKey: string, rel: string): string;
-export declare function loadCache(readFileSync?: typeof fs.readFileSync): HashCache;
-export declare function saveCache(cache: HashCache, deps?: typeof fs): void;
-export declare function applyCache(prev: HashCache, repoKey: string, candidates: Candidate[]): {
-    changed: Candidate[];
-    next: HashCache;
-};

package/dist/backup/match.d.ts

@@ -1,2 +0,0 @@
-export declare function hasSkillFrontmatter(md: string): boolean;
-export declare function isArtifactPath(rel: string, getContent: () => string): boolean;

package/dist/backup/run.d.ts

@@ -1,25 +0,0 @@
-import { type HashCache, type Candidate } from "./cache";
-export interface SelectDeps {
-    readFile: (rel: string) => string;
-    sha256: (content: string) => string;
-}
-export declare function unionPaths(a: string[], b: string[]): string[];
-export declare function selectBackupFiles(input: {
-    repoKey: string;
-    statusPaths: string[];
-    prevCache: HashCache;
-    deps: SelectDeps;
-}): {
-    changed: Candidate[];
-    next: HashCache;
-};
-import { readConfig } from "../utils";
-import { loadCache, saveCache } from "./cache";
-export declare function gitCandidatePaths(root: string): string[];
-export declare function runBackup(cwd: string, hookScriptPath: string): void;
-export interface BackupUploadDeps {
-    readConfig: typeof readConfig;
-    loadCache: typeof loadCache;
-    saveCache: typeof saveCache;
-}
-export declare function runBackupUpload(jobFile: string, deps?: BackupUploadDeps): Promise<void>;

package/dist/captureExclusions.d.ts

@@ -1,30 +0,0 @@
-import type { CodiedevConfig } from "./utils";
-export interface NormalizeCapturePathDeps {
-    cwd?: () => string;
-    homedir?: () => string;
-    realpathSync?: (value: string) => string;
-}
-/**
- * Convert a user-entered path into the canonical absolute form persisted in
- * ~/.codiedev/config.json. Existing symlinks resolve to their real target so a
- * session cannot bypass an exclusion by entering the same folder through a
- * different alias. Non-existent paths still normalize deterministically.
- */
-export declare function normalizeCapturePath(input: string, deps?: NormalizeCapturePathDeps): string;
-export declare function findMatchingCaptureExclusion(candidate: string | string[] | undefined, ignoredPaths: string[] | undefined): string | null;
-export declare function isCaptureIgnored(candidate: string | string[] | undefined, ignoredPaths: string[] | undefined): boolean;
-export interface CaptureScopeInput {
-    cwd?: string;
-    workspace_roots?: string[];
-}
-/** Every local root associated with a hook event, deduped in stable order. */
-export declare function captureScopePaths(input: CaptureScopeInput, fallback?: string): string[];
-export declare function shouldIgnoreCaptureInput(config: Pick<CodiedevConfig, "captureIgnoredPaths"> | null | undefined, input: CaptureScopeInput, fallback?: string): boolean;
-/**
- * Final egress decision for queued transcript uploads. Jobs written by older
- * CLI versions have no scope metadata; once any exclusion exists, dropping
- * those legacy jobs is safer than guessing that they are public.
- */
-export declare function shouldSkipCaptureUploadJob(job: {
-    scopePaths?: string[];
-}, config: Pick<CodiedevConfig, "captureIgnoredPaths"> | null | undefined): boolean;

package/dist/captureLog.d.ts

@@ -1,20 +0,0 @@
-import * as fs from "fs";
-export declare const CAPTURE_LOG_MAX_BYTES: number;
-export declare const CAPTURE_LOG_PATH: string;
-export interface CaptureLogEntry {
-    stage: "capture-finish" | "upload" | "upload-deferred" | "security" | "stderr";
-    sessionId: string | undefined;
-    outcome: string;
-    detail?: string;
-}
-interface LogDeps {
-    readFileSync: typeof fs.readFileSync;
-    writeFileSync: typeof fs.writeFileSync;
-    appendFileSync: typeof fs.appendFileSync;
-    existsSync: typeof fs.existsSync;
-    mkdirSync: typeof fs.mkdirSync;
-    statSync: typeof fs.statSync;
-}
-export declare function appendCaptureLog(entry: CaptureLogEntry, deps?: LogDeps, filePath?: string, now?: () => number): void;
-export declare function readCaptureLogTail(n: number, deps?: Pick<LogDeps, "readFileSync" | "existsSync">, filePath?: string): string[];
-export {};

package/dist/captureReadiness.d.ts

@@ -1,65 +0,0 @@
-import type { LastCaptureRecord } from "./utils";
-export interface CaptureReadinessDeps<R = unknown> {
-    exec: (cmd: string, cwd: string) => string;
-    getRemoteUrl: (cwd: string) => string | null;
-    matchRepo: (url: string, repos: R[]) => R | null;
-    getBranch: (cwd: string) => string | null;
-    getHeadSha: (cwd: string) => string | null;
-}
-export interface CaptureReadiness {
-    gitOnPath: boolean;
-    insideWorkTree: boolean;
-    remoteUrl: string | null;
-    matched: boolean;
-    branch: string | null;
-    headSha: string | null;
-}
-export declare function assessCaptureReadiness<R>(cwd: string, repos: R[], deps: CaptureReadinessDeps<R>): CaptureReadiness;
-export interface WorkspaceRepoScanDeps<R = unknown> {
-    listChildDirs: (cwd: string) => string[];
-    isRepo: (dir: string) => boolean;
-    getRemoteUrl: (dir: string) => string | null;
-    matchRepo: (url: string, repos: R[]) => R | null;
-}
-export interface WorkspaceRepoScan {
-    repoCount: number;
-    matchedCount: number;
-}
-export declare function assessWorkspaceRepos<R>(cwd: string, repos: R[], deps: WorkspaceRepoScanDeps<R>): WorkspaceRepoScan;
-export declare function formatRelativeAge(ms: number): string;
-export interface LastCaptureSummary {
-    status: "pass" | "warn";
-    detail: string;
-}
-export declare function summarizeLastCapture(record: LastCaptureRecord | null, nowMs: number): LastCaptureSummary;
-export interface CaptureActivitySummary {
-    status: "pass" | "warn" | "fail";
-    detail: string;
-}
-/**
- * When `text` (an error message, code, or capture.log detail) indicates a
- * TLS-trust failure from SSL inspection, return the remediation hint;
- * otherwise null.
- */
-export declare function tlsInterceptionHint(text: string, host: string): string | null;
-/**
- * Flatten a thrown fetch/network error to "<message> (<code>)". undici's
- * fetch wraps the real failure in TypeError("fetch failed") with the cause
- * chained on `.cause` — walk to the deepest cause so doctor reports the
- * actual TLS/socket error instead of "fetch failed".
- */
-export declare function describeFetchError(err: unknown): string;
-export declare function summarizeCaptureActivity(tailLines: string[], pendingJobCount: number, backendHost?: string): CaptureActivitySummary;
-export interface ServerCaptureResponse {
-    found: boolean;
-    latest: {
-        sessionId: string;
-        capturedAt: number;
-        createdAt: number;
-        repoMatched: boolean;
-        branch: string | null;
-        headSha: string | null;
-    } | null;
-    sessionFound?: boolean;
-}
-export declare function summarizeServerCapture(server: ServerCaptureResponse | null, local: LastCaptureRecord | null, nowMs: number): LastCaptureSummary;

package/dist/cli.d.ts

@@ -1,16 +0,0 @@
-#!/usr/bin/env node
-/**
- * Codiedev CLI dispatcher.
- *
- * Subcommands:
- *   codiedev connect                   — link agent CLIs to your org
- *   codiedev push <file>               — author/update a spec/review/decision/etc.
- *   codiedev pull <key>                — fetch an artifact by filename key
- *   codiedev ping <user> "<msg>"       — send a message (optionally --with <key>)
- *   codiedev inbox                     — list pings (use --unread to filter)
- *   codiedev read <ping-id>            — mark read + show full message
- *   codiedev note "<text>"             — capture a thought
- *   codiedev promote <artifact-id>     — promote an extracted artifact to authored
- *   codiedev help                      — show this help
- */
-export {};

package/dist/codexHookTrust.d.ts

@@ -1,34 +0,0 @@
-interface CommandHandler {
-    type?: unknown;
-    command?: unknown;
-    commandWindows?: unknown;
-    command_windows?: unknown;
-    timeout?: unknown;
-    async?: unknown;
-    statusMessage?: unknown;
-    additionalContextLimit?: unknown;
-}
-interface MatcherGroup {
-    matcher?: unknown;
-    hooks?: unknown;
-}
-export interface CodexHookTrustEntry {
-    key: string;
-    eventName: string;
-    command: string;
-    currentHash: string;
-}
-/** Codex hashes a canonical, normalized hook identity before it will execute a
- * user hook. Keep this compatible with codex_config::version_for_toml. */
-export declare function codexCommandHookHash(eventName: string, group: MatcherGroup, handler: CommandHandler): string;
-export declare function codiedevCodexHookTrustEntries(hooksPath: string, hooksFile: unknown): CodexHookTrustEntry[];
-/** `codiedev connect` is an explicit install action, so trust only the exact
- * Codiedev commands it just wrote. Any later command change produces a new
- * hash and Codex disables that hook until connect is run again. */
-export declare function writeCodexHookTrust(configPath: string, hooksPath: string, hooksFile: unknown): CodexHookTrustEntry[];
-export declare function inspectCodexHookTrust(configPath: string, hooksPath: string, hooksFile: unknown, requiredSubcommands?: string[]): {
-    ok: boolean;
-    total: number;
-    trusted: number;
-};
-export {};

package/dist/codie.d.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};

package/dist/codieLauncher.d.ts

@@ -1,53 +0,0 @@
-export interface CatalogModel {
-    id: string;
-    name?: string;
-}
-export declare const CODIE_SECURITY_BLOCK_MARKER = "__CODIEDEV_SECURITY_BLOCK__";
-/** Extract the private adapter marker used to carry a local block reason
- * across OpenCode's generic 500 boundary. The marker never contains prompt or
- * tool input — only the deterministic policy reason. */
-export declare function extractCodieSecurityBlock(stderr: string): string | undefined;
-/**
- * Pin non-interactive runs to the directory where `codie` was launched.
- * OpenCode can reuse a previously-known project instance; without an explicit
- * --dir, a real smoke run launched in a throwaway repo resumed the caller's
- * main checkout and executed there. TUI mode already owns its cwd directly.
- */
-export declare function withCodieWorkingDirectory(args: string[], cwd: string): string[];
-export declare function bareModel(value: unknown): string;
-export declare function buildCodieConfig({ existing, catalog, env, plugin, plugins, }: {
-    existing?: Record<string, any>;
-    catalog: CatalogModel[];
-    env?: Record<string, string | undefined>;
-    plugin?: string;
-    plugins?: string[];
-}): Record<string, any>;
-export declare const BRAND_PLUGIN_SPEC = "./plugins/codiedev-brand.tsx";
-export declare function withBrandPlugin(existing: Record<string, any> | undefined): {
-    config: Record<string, any>;
-    changed: boolean;
-};
-export declare const STOCK_WORDMARK: string;
-export declare const LEGACY_CODIEDEV_WORDMARK: string;
-export declare const CODIEDEV_WORDMARK: string;
-export declare const HIDDEN_WORDMARK: string;
-export declare function patchBrandWordmark(binary: Buffer): {
-    changed: boolean;
-    offset: number;
-    stock: Buffer;
-    replacement: Buffer | null;
-};
-export declare function resolveCapturePlugin({ homeDir, existsSync, }: {
-    homeDir: string;
-    existsSync: (candidate: string) => boolean;
-}): string;
-export declare function fetchApprovedCatalog({ baseUrl, key, fetchImpl, }: {
-    baseUrl?: string;
-    key: string;
-    fetchImpl?: typeof fetch;
-}): Promise<CatalogModel[]>;
-export declare function parseCodieArgs(argv: string[]): {
-    args: string[];
-    overrides: Record<string, string>;
-};
-export declare function validateCodieArgs(args: string[], catalog: CatalogModel[]): void;

package/dist/codieRuntime.d.ts

@@ -1,29 +0,0 @@
-export declare const OPENCODE_RUNTIME_SPEC = "opencode-ai@1.18.4";
-export declare const OPENCODE_RUNTIME_VERSION: string;
-export declare const CODIE_MIN_NODE_MAJOR = 20;
-export type CodieRuntime = {
-    kind: "ready";
-    binary: string;
-} | {
-    kind: "missing";
-    installDir: string;
-    binary: string;
-    spec: string;
-} | {
-    kind: "outdated";
-    installDir: string;
-    binary: string;
-    spec: string;
-    currentVersion: string;
-    expectedVersion: string;
-};
-export declare function codieRuntimeDir(stateDir: string): string;
-export declare function installedRuntimePackageJson(stateDir: string): string;
-export declare function resolveCodieRuntime({ env, stateDir, existsSync, readInstalledVersion, resolveBundled, }: {
-    env: Record<string, string | undefined>;
-    stateDir: string;
-    existsSync: (candidate: string) => boolean;
-    readInstalledVersion?: (packageJson: string) => string | null;
-    resolveBundled: () => string | null;
-}): CodieRuntime;
-export declare function assertCodieNodeVersion(version: string): void;

package/dist/codieRuntimeInstall.d.ts

@@ -1,28 +0,0 @@
-import { CodieRuntime } from "./codieRuntime";
-type InstallableCodieRuntime = Exclude<CodieRuntime, {
-    kind: "ready";
-}>;
-export declare function buildRuntimeInstallArgs(stagingDir: string, spec: string): string[];
-export interface InstallDeps {
-    runtime: InstallableCodieRuntime;
-    makeStagingDir: () => string;
-    run: (args: string[]) => {
-        status: number | null;
-        stderr: string;
-    };
-    exists: (candidate: string) => boolean;
-    rename: (from: string, to: string) => void;
-    remove: (target: string) => void;
-    log: (message: string) => void;
-}
-export declare function installCodieRuntime(deps: InstallDeps): void;
-export declare function ensureCodieRuntimeBinary({ resolve, install, confirmUpdate, }: {
-    resolve: () => CodieRuntime;
-    install: (runtime: InstallableCodieRuntime) => void;
-    confirmUpdate?: (runtime: Extract<CodieRuntime, {
-        kind: "outdated";
-    }>) => Promise<boolean>;
-}): Promise<string>;
-export declare function installCodieRuntimeOnDisk(runtime: InstallableCodieRuntime, stateDir: string): void;
-export declare function defaultStagingRoot(): string;
-export {};

package/dist/codieStartup.d.ts

@@ -1,26 +0,0 @@
-import type { AgentSurface, EndpointSecurityPolicy } from "./security";
-import type { AgentSecurityEntitlement } from "./securityFeature";
-export interface CodieStartupConfig extends AgentSecurityEntitlement {
-    backendUrl?: string;
-    token?: string;
-    companyId?: string;
-    deviceId?: string;
-}
-export type CodiePolicyRefreshResult = {
-    status: "disabled";
-} | {
-    status: "synced";
-    policy: EndpointSecurityPolicy;
-} | {
-    status: "cached";
-    error: string;
-};
-/** Refresh the endpoint policy before Codie hands the terminal to OpenCode.
- * Enforcement remains available offline because hooks keep using the last
- * verified company-scoped policy when this best-effort refresh cannot land. */
-export declare function refreshCodieSecurityPolicy(config: CodieStartupConfig, syncPolicy?: (config: {
-    backendUrl: string;
-    token: string;
-    companyId: string;
-    deviceId?: string;
-}, source?: AgentSurface) => Promise<EndpointSecurityPolicy>): Promise<CodiePolicyRefreshResult>;

package/dist/codieStartup.js

@@ -1,30 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.refreshCodieSecurityPolicy = refreshCodieSecurityPolicy;
-const securityFeature_1 = require("./securityFeature");
-const securityPolicy_1 = require("./securityPolicy");
-/** Refresh the endpoint policy before Codie hands the terminal to OpenCode.
- * Enforcement remains available offline because hooks keep using the last
- * verified company-scoped policy when this best-effort refresh cannot land. */
-async function refreshCodieSecurityPolicy(config, syncPolicy = securityPolicy_1.syncEndpointSecurityPolicy) {
-    if (!(0, securityFeature_1.isAgentSecurityEnabled)(config))
-        return { status: "disabled" };
-    if (!config.backendUrl || !config.token || !config.companyId) {
-        return { status: "cached", error: "connected account details are incomplete" };
-    }
-    try {
-        const policy = await syncPolicy({
-            backendUrl: config.backendUrl,
-            token: config.token,
-            companyId: config.companyId,
-            ...(config.deviceId ? { deviceId: config.deviceId } : {}),
-        }, "codie-harness");
-        return { status: "synced", policy };
-    }
-    catch (error) {
-        return {
-            status: "cached",
-            error: error instanceof Error ? error.message : String(error),
-        };
-    }
-}

package/dist/commands/ask.d.ts

@@ -1 +0,0 @@
-export declare function runAsk(args: string[]): Promise<void>;

package/dist/commands/capture.d.ts

@@ -1,14 +0,0 @@
-import { type CodiedevConfig } from "../utils";
-import { apiRequest } from "./shared";
-export interface CaptureCommandDeps {
-    readConfig: () => CodiedevConfig | null;
-    writeConfig: (config: CodiedevConfig) => void;
-    apiRequest: typeof apiRequest;
-    log: (line: string) => void;
-    warn: (line: string) => void;
-    randomUUID: () => string;
-    hostname: () => string;
-    normalizePath: (value: string) => string;
-    configForRequest: (config: CodiedevConfig) => CodiedevConfig;
-}
-export declare function runCaptureCommand(args: string[], depsOverride?: Partial<CaptureCommandDeps>): Promise<void>;

package/dist/commands/createTicket.d.ts

@@ -1,27 +0,0 @@
-import type { CodiedevConfig } from "../utils";
-export declare function substitutePrompt(protocol: string, prompt: string | undefined): string;
-interface ConnectedRepo {
-    repoId: string;
-    fullName: string;
-}
-export declare function validatePlanHasRepo(parsedPlan: any): string | null;
-export declare function resolveRepoIds(fullNames: string[], repos: ConnectedRepo[]): string[];
-export interface CreateTicketArgs {
-    mode: "bare" | "submit";
-    prompt?: string;
-    submitSource?: "stdin" | string;
-}
-export declare function parseCreateTicketArgs(args: string[]): CreateTicketArgs;
-export declare function runCreateTicket(args: string[]): Promise<void>;
-/**
- * Bare-mode entrypoint. Fetches the protocol body from the backend so we can
- * iterate on it without shipping a new CLI, substitutes the user's prompt,
- * and writes the result to stdout for the agent to follow. Hard-errors on
- * fetch failure rather than falling back to a stale local copy — the whole
- * point of moving the protocol server-side is that the freshest version is
- * the only version.
- */
-export declare function runBare(config: CodiedevConfig, prompt: string | undefined): Promise<void>;
-export declare function runSubmit(config: CodiedevConfig, rawJson: string): Promise<void>;
-export declare function readSubmitInput(source: "stdin" | string): string;
-export {};

package/dist/commands/delete.d.ts

@@ -1 +0,0 @@
-export declare function runDelete(args: string[]): Promise<void>;

package/dist/commands/doctor.d.ts

@@ -1 +0,0 @@
-export declare function runDoctor(_args: string[]): Promise<void>;

package/dist/commands/inbox.d.ts

@@ -1,3 +0,0 @@
-import type { CodiedevConfig } from "../utils";
-export declare function runInbox(args: string[], configOverride?: CodiedevConfig): Promise<void>;
-export declare function runRead(args: string[]): Promise<void>;

package/dist/commands/library.d.ts

@@ -1,2 +0,0 @@
-import type { CodiedevConfig } from "../utils";
-export declare function runLibrary(args: string[], configOverride?: CodiedevConfig): Promise<void>;

package/dist/commands/note.d.ts

@@ -1 +0,0 @@
-export declare function runNote(args: string[]): Promise<void>;

package/dist/commands/ping.d.ts

@@ -1 +0,0 @@
-export declare function runPing(args: string[]): Promise<void>;

package/dist/commands/promote.d.ts

@@ -1 +0,0 @@
-export declare function runPromote(args: string[]): Promise<void>;