codiedev 0.10.0-beta.4 → 0.10.0-beta.6

package/dist/version.js

@@ -1,10 +1,4 @@
 "use strict";
-// Resolves the running CLI version. Read once at startup so subsequent
-// auth calls don't pay an fs.readFile per request.
-//
-// We could `import packageJson from "../package.json"` but that requires
-// `resolveJsonModule` and emits the JSON into dist. Reading at runtime
-// keeps the bundle smaller and works regardless of tsconfig settings.
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -43,9 +37,6 @@ exports.CLI_VERSION = void 0;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 function resolveCliVersion() {
-    // dist/version.js sits alongside dist/cli.js. The package.json is one
-    // directory up from dist/, i.e. `../package.json` relative to this file.
-    // In TS source we're at src/version.ts so the path is `../package.json`.
     const candidates = [
         path.join(__dirname, "..", "package.json"),
         path.join(__dirname, "..", "..", "package.json"),
@@ -59,7 +50,6 @@ function resolveCliVersion() {
             }
         }
         catch {
-            // try next candidate
         }
     }
     return "0.0.0";

package/dist/versionCheck.js

@@ -1,8 +1,4 @@
 "use strict";
-// Pure version-comparison helpers for the "is your CLI outdated" warning.
-// The IO (fetching npm registry, reading/writing the cache file) lives in
-// connect.ts/doctor.ts and is exercised by manual smoke. Keeping the policy
-// pure means the truth table is unit-testable without mocking fetch or fs.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseSemver = parseSemver;
 exports.compareSemver = compareSemver;
@@ -19,13 +15,6 @@ function parseSemver(input) {
         return null;
     return { major: Number(m[1]), minor: Number(m[2]), patch: Number(m[3]) };
 }
-/**
- * Returns -1 if a < b, 0 if equal, 1 if a > b.
- *
- * Malformed input on either side returns 0 — we never want to nag a user
- * because of garbage version strings (corrupt cache, registry returned
- * something weird, prerelease format we don't recognize).
- */
 function compareSemver(a, b) {
     const pa = parseSemver(a);
     const pb = parseSemver(b);
@@ -39,25 +28,11 @@ function compareSemver(a, b) {
         return pa.patch < pb.patch ? -1 : 1;
     return 0;
 }
-/**
- * Warning policy: only show when we have a known-newer `latest` from a
- * recent-enough cache. Stale-cache freshness is enforced by the *caller*
- * (which decides whether to refetch); this helper takes the cache state
- * as-given and answers a single question — should the user see a nag?
- */
 function shouldShowUpdateWarning(input) {
     if (!input.latest)
         return false;
     return compareSemver(input.current, input.latest) === -1;
 }
-/**
- * npx       — running from npm's _npx cache; nothing to upgrade in place.
- * container — baked into an image; the honest fix is rebuilding it.
- * global    — a real install directory we can write to. Upgradable.
- * readonly  — a real install directory we cannot write to (root-owned global
- *             on a shared box, read-only mount). Needs sudo, so print rather
- *             than attempt an upgrade that would EACCES.
- */
 function resolveInstallKind(deps) {
     if (/[\\/](?:_npx|\.npm[\\/]_npx)[\\/]/.test(deps.dirname))
         return "npx";
@@ -71,10 +46,8 @@ function resolveInstallKind(deps) {
         }
     }
     catch {
-        // not Linux, or no procfs — fall through to the writability probe
     }
     try {
-        // 2 = fs.constants.W_OK, inlined so this module stays fs-free.
         deps.accessSync(deps.dirname, 2);
         return "global";
     }
@@ -94,12 +67,6 @@ function upgradeCommand(kind, pkg = "codiedev") {
             return `npm i -g ${pkg}@latest`;
     }
 }
-/**
- * `promptedAt` makes a decline stick until the next window instead of asking
- * on every launch. It is deliberately not keyed to a dismissed version:
- * somebody who says no today should be asked again tomorrow, not silently
- * stranded on that version forever.
- */
 function decideUpdateAction(input) {
     const command = upgradeCommand(input.installKind, input.pkg);
     const ttl = input.cacheTtlMs ?? 24 * 60 * 60 * 1000;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "codiedev",
-  "version": "0.10.0-beta.4",
-  "description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness",
+  "version": "0.10.0-beta.6",
+  "description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration \u2014 and run the governed Codie harness",
   "bin": {
     "codiedev": "dist/cli.js",
     "codiedev-hook": "dist/hook.js",
@@ -12,13 +12,12 @@
     "dev": "tsc --watch",
     "prepublishOnly": "tsc",
     "test": "vitest run",
-    "test:functional": "vitest run src/__tests__/limitEvent.functional.test.ts src/__tests__/harnessParity.functional.test.ts src/__tests__/cursorParity.functional.test.ts",
-    "test:harness-parity": "vitest run src/__tests__/harnessParity.functional.test.ts src/__tests__/cursorParity.functional.test.ts",
+    "test:functional": "vitest run src/__tests__/limitEvent.functional.test.ts src/__tests__/harnessParity.functional.test.ts src/__tests__/cursorParity.functional.test.ts src/__tests__/copilotCapture.functional.test.ts src/__tests__/piCapture.functional.test.ts",
+    "test:harness-parity": "vitest run src/__tests__/harnessParity.functional.test.ts src/__tests__/cursorParity.functional.test.ts src/__tests__/copilotCapture.functional.test.ts src/__tests__/piCapture.functional.test.ts",
     "test:harness-binaries": "node scripts/checkHarnessBinaries.mjs",
-    "test:security-beta": "vitest run src/__tests__/security.test.ts src/__tests__/securityCommandEntitlement.test.ts src/__tests__/securityDeepScan.test.ts src/__tests__/securityDoctor.test.ts src/__tests__/securityEntitlementInstall.test.ts src/__tests__/securityFeature.test.ts src/__tests__/securityInstall.test.ts src/__tests__/securityInventory.test.ts src/__tests__/securityPilot.test.ts src/__tests__/securityPolicy.test.ts src/__tests__/securitySession.test.ts src/__tests__/codexHookTrust.test.ts src/__tests__/codieSecurityAdapterWiring.test.ts src/__tests__/limitEvent.functional.test.ts && tsc && node dist/cli.js security pilot --json",
-    "test:security-pilot": "vitest run src/__tests__/security.test.ts src/__tests__/securityInstall.test.ts src/__tests__/securityPilot.test.ts src/__tests__/codieSecurityAdapterWiring.test.ts && tsc && node dist/cli.js security pilot --json",
     "test:opencode-attribution": "vitest run src/__tests__/repoResolver.test.ts src/__tests__/openCodeCapture.test.ts src/__tests__/openCodePluginGitRefs.test.ts src/__tests__/capturePayloadFinal.test.ts src/__tests__/captureDirectUpload.test.ts src/__tests__/resolveCaptureFinal.test.ts && tsc",
-    "test:watch": "vitest"
+    "test:watch": "vitest",
+    "test:metadata-parity": "vitest run src/__tests__/sourceMetadataMatrix.test.ts src/__tests__/copilotCapture.functional.test.ts src/__tests__/copilotCapture.test.ts src/__tests__/piCapture.functional.test.ts src/__tests__/piHooks.test.ts src/__tests__/cursorParity.functional.test.ts src/__tests__/nativeSourceParity.test.ts src/__tests__/harnessParity.functional.test.ts src/__tests__/subagents.test.ts src/__tests__/transcriptModels.test.ts src/__tests__/captureRetry.test.ts src/__tests__/limitEvent.functional.test.ts src/__tests__/captureExclusions.test.ts"
   },
   "files": [
     "dist",
@@ -63,8 +62,8 @@
     "@modelcontextprotocol/sdk": "^1.30.0"
   },
   "overrides": {
-    "@hono/node-server": "^2.0.12",
-    "ip-address": "^10.4.0",
+    "@hono/node-server": "^2.1.5",
+    "ip-address": "^10.7.4",
     "esbuild": "^0.28.1"
   }
 }

package/dist/backup/cache.d.ts

@@ -1,14 +0,0 @@
-import * as fs from "fs";
-export type HashCache = Record<string, string>;
-export interface Candidate {
-    rel: string;
-    hash: string;
-    abs?: string;
-}
-export declare function cacheKey(repoKey: string, rel: string): string;
-export declare function loadCache(readFileSync?: typeof fs.readFileSync): HashCache;
-export declare function saveCache(cache: HashCache, deps?: typeof fs): void;
-export declare function applyCache(prev: HashCache, repoKey: string, candidates: Candidate[]): {
-    changed: Candidate[];
-    next: HashCache;
-};

package/dist/backup/match.d.ts

@@ -1,2 +0,0 @@
-export declare function hasSkillFrontmatter(md: string): boolean;
-export declare function isArtifactPath(rel: string, getContent: () => string): boolean;

package/dist/backup/run.d.ts

@@ -1,25 +0,0 @@
-import { type HashCache, type Candidate } from "./cache";
-export interface SelectDeps {
-    readFile: (rel: string) => string;
-    sha256: (content: string) => string;
-}
-export declare function unionPaths(a: string[], b: string[]): string[];
-export declare function selectBackupFiles(input: {
-    repoKey: string;
-    statusPaths: string[];
-    prevCache: HashCache;
-    deps: SelectDeps;
-}): {
-    changed: Candidate[];
-    next: HashCache;
-};
-import { readConfig } from "../utils";
-import { loadCache, saveCache } from "./cache";
-export declare function gitCandidatePaths(root: string): string[];
-export declare function runBackup(cwd: string, hookScriptPath: string): void;
-export interface BackupUploadDeps {
-    readConfig: typeof readConfig;
-    loadCache: typeof loadCache;
-    saveCache: typeof saveCache;
-}
-export declare function runBackupUpload(jobFile: string, deps?: BackupUploadDeps): Promise<void>;

package/dist/captureExclusions.d.ts

@@ -1,30 +0,0 @@
-import type { CodiedevConfig } from "./utils";
-export interface NormalizeCapturePathDeps {
-    cwd?: () => string;
-    homedir?: () => string;
-    realpathSync?: (value: string) => string;
-}
-/**
- * Convert a user-entered path into the canonical absolute form persisted in
- * ~/.codiedev/config.json. Existing symlinks resolve to their real target so a
- * session cannot bypass an exclusion by entering the same folder through a
- * different alias. Non-existent paths still normalize deterministically.
- */
-export declare function normalizeCapturePath(input: string, deps?: NormalizeCapturePathDeps): string;
-export declare function findMatchingCaptureExclusion(candidate: string | string[] | undefined, ignoredPaths: string[] | undefined): string | null;
-export declare function isCaptureIgnored(candidate: string | string[] | undefined, ignoredPaths: string[] | undefined): boolean;
-export interface CaptureScopeInput {
-    cwd?: string;
-    workspace_roots?: string[];
-}
-/** Every local root associated with a hook event, deduped in stable order. */
-export declare function captureScopePaths(input: CaptureScopeInput, fallback?: string): string[];
-export declare function shouldIgnoreCaptureInput(config: Pick<CodiedevConfig, "captureIgnoredPaths"> | null | undefined, input: CaptureScopeInput, fallback?: string): boolean;
-/**
- * Final egress decision for queued transcript uploads. Jobs written by older
- * CLI versions have no scope metadata; once any exclusion exists, dropping
- * those legacy jobs is safer than guessing that they are public.
- */
-export declare function shouldSkipCaptureUploadJob(job: {
-    scopePaths?: string[];
-}, config: Pick<CodiedevConfig, "captureIgnoredPaths"> | null | undefined): boolean;

package/dist/captureLog.d.ts

@@ -1,20 +0,0 @@
-import * as fs from "fs";
-export declare const CAPTURE_LOG_MAX_BYTES: number;
-export declare const CAPTURE_LOG_PATH: string;
-export interface CaptureLogEntry {
-    stage: "capture-finish" | "upload" | "upload-deferred" | "security" | "stderr" | "limit";
-    sessionId: string | undefined;
-    outcome: string;
-    detail?: string;
-}
-interface LogDeps {
-    readFileSync: typeof fs.readFileSync;
-    writeFileSync: typeof fs.writeFileSync;
-    appendFileSync: typeof fs.appendFileSync;
-    existsSync: typeof fs.existsSync;
-    mkdirSync: typeof fs.mkdirSync;
-    statSync: typeof fs.statSync;
-}
-export declare function appendCaptureLog(entry: CaptureLogEntry, deps?: LogDeps, filePath?: string, now?: () => number): void;
-export declare function readCaptureLogTail(n: number, deps?: Pick<LogDeps, "readFileSync" | "existsSync">, filePath?: string): string[];
-export {};

package/dist/captureReadiness.d.ts

@@ -1,65 +0,0 @@
-import type { LastCaptureRecord } from "./utils";
-export interface CaptureReadinessDeps<R = unknown> {
-    exec: (cmd: string, cwd: string) => string;
-    getRemoteUrl: (cwd: string) => string | null;
-    matchRepo: (url: string, repos: R[]) => R | null;
-    getBranch: (cwd: string) => string | null;
-    getHeadSha: (cwd: string) => string | null;
-}
-export interface CaptureReadiness {
-    gitOnPath: boolean;
-    insideWorkTree: boolean;
-    remoteUrl: string | null;
-    matched: boolean;
-    branch: string | null;
-    headSha: string | null;
-}
-export declare function assessCaptureReadiness<R>(cwd: string, repos: R[], deps: CaptureReadinessDeps<R>): CaptureReadiness;
-export interface WorkspaceRepoScanDeps<R = unknown> {
-    listChildDirs: (cwd: string) => string[];
-    isRepo: (dir: string) => boolean;
-    getRemoteUrl: (dir: string) => string | null;
-    matchRepo: (url: string, repos: R[]) => R | null;
-}
-export interface WorkspaceRepoScan {
-    repoCount: number;
-    matchedCount: number;
-}
-export declare function assessWorkspaceRepos<R>(cwd: string, repos: R[], deps: WorkspaceRepoScanDeps<R>): WorkspaceRepoScan;
-export declare function formatRelativeAge(ms: number): string;
-export interface LastCaptureSummary {
-    status: "pass" | "warn";
-    detail: string;
-}
-export declare function summarizeLastCapture(record: LastCaptureRecord | null, nowMs: number): LastCaptureSummary;
-export interface CaptureActivitySummary {
-    status: "pass" | "warn" | "fail";
-    detail: string;
-}
-/**
- * When `text` (an error message, code, or capture.log detail) indicates a
- * TLS-trust failure from SSL inspection, return the remediation hint;
- * otherwise null.
- */
-export declare function tlsInterceptionHint(text: string, host: string): string | null;
-/**
- * Flatten a thrown fetch/network error to "<message> (<code>)". undici's
- * fetch wraps the real failure in TypeError("fetch failed") with the cause
- * chained on `.cause` — walk to the deepest cause so doctor reports the
- * actual TLS/socket error instead of "fetch failed".
- */
-export declare function describeFetchError(err: unknown): string;
-export declare function summarizeCaptureActivity(tailLines: string[], pendingJobCount: number, backendHost?: string): CaptureActivitySummary;
-export interface ServerCaptureResponse {
-    found: boolean;
-    latest: {
-        sessionId: string;
-        capturedAt: number;
-        createdAt: number;
-        repoMatched: boolean;
-        branch: string | null;
-        headSha: string | null;
-    } | null;
-    sessionFound?: boolean;
-}
-export declare function summarizeServerCapture(server: ServerCaptureResponse | null, local: LastCaptureRecord | null, nowMs: number): LastCaptureSummary;

package/dist/captureSignals.d.ts

@@ -1,19 +0,0 @@
-export declare const CAPTURE_SIGNALS_VERSION = 1;
-export type CaptureSignals = {
-    version: 1;
-    parsedRecords: number;
-    timestampCount: number;
-    firstAt?: number;
-    lastAt?: number;
-    activeMs: number;
-    idleThresholdMs: number;
-    skillInvocations: string[];
-    skillPulls: string[];
-    toolCalls: Array<{
-        name: string;
-        calls: number;
-    }>;
-    truncated: boolean;
-};
-/** Compact diagnostic inputs only: never persist prompts, commands or tool output. */
-export declare function parseCaptureSignals(content: string, source?: string): CaptureSignals;

package/dist/cli.d.ts

@@ -1,16 +0,0 @@
-#!/usr/bin/env node
-/**
- * Codiedev CLI dispatcher.
- *
- * Subcommands:
- *   codiedev connect                   — link agent CLIs to your org
- *   codiedev push <file>               — author/update a spec/review/decision/etc.
- *   codiedev pull <key>                — fetch an artifact by filename key
- *   codiedev ping <user> "<msg>"       — send a message (optionally --with <key>)
- *   codiedev inbox                     — list pings (use --unread to filter)
- *   codiedev read <ping-id>            — mark read + show full message
- *   codiedev note "<text>"             — capture a thought
- *   codiedev promote <artifact-id>     — promote an extracted artifact to authored
- *   codiedev help                      — show this help
- */
-export {};

package/dist/codexHookTrust.d.ts

@@ -1,34 +0,0 @@
-interface CommandHandler {
-    type?: unknown;
-    command?: unknown;
-    commandWindows?: unknown;
-    command_windows?: unknown;
-    timeout?: unknown;
-    async?: unknown;
-    statusMessage?: unknown;
-    additionalContextLimit?: unknown;
-}
-interface MatcherGroup {
-    matcher?: unknown;
-    hooks?: unknown;
-}
-export interface CodexHookTrustEntry {
-    key: string;
-    eventName: string;
-    command: string;
-    currentHash: string;
-}
-/** Codex hashes a canonical, normalized hook identity before it will execute a
- * user hook. Keep this compatible with codex_config::version_for_toml. */
-export declare function codexCommandHookHash(eventName: string, group: MatcherGroup, handler: CommandHandler): string;
-export declare function codiedevCodexHookTrustEntries(hooksPath: string, hooksFile: unknown): CodexHookTrustEntry[];
-/** `codiedev connect` is an explicit install action, so trust only the exact
- * Codiedev commands it just wrote. Any later command change produces a new
- * hash and Codex disables that hook until connect is run again. */
-export declare function writeCodexHookTrust(configPath: string, hooksPath: string, hooksFile: unknown): CodexHookTrustEntry[];
-export declare function inspectCodexHookTrust(configPath: string, hooksPath: string, hooksFile: unknown, requiredSubcommands?: string[]): {
-    ok: boolean;
-    total: number;
-    trusted: number;
-};
-export {};

package/dist/codexLimitScan.d.ts

@@ -1,64 +0,0 @@
-import { type LimitEvent } from "./limitEvent";
-import type { LimitEventPayload } from "./limitEventReporter";
-export interface CodexLimitHit {
-    event: LimitEvent;
-    /** Byte offset just past the matched line — the tail ends here, not at EOF. */
-    lineEnd: number;
-}
-export interface ScanOptions {
-    chunkSize?: number;
-    maxScanBytes?: number;
-}
-/**
- * Find the LAST rate-limit/credit block recorded in a Codex rollout file.
- * Returns null when the session was never blocked.
- */
-export declare function scanCodexRolloutForLimit(filePath: string, options?: ScanOptions): CodexLimitHit | null;
-/**
- * Read up to `maxBytes` of the rollout ENDING at `lineEnd` — the work the
- * developer was doing when the block hit, not whatever the session did after
- * the window reset. Resumes at a line boundary so every JSONL line parses.
- */
-export declare function readTailEndingAt(filePath: string, lineEnd: number, maxBytes?: number): string;
-export interface FindRolloutOptions {
-    withinMs?: number;
-    maxFiles?: number;
-    now?: number;
-}
-/** Codex rollout files, newest first, limited by age and count. */
-export declare function findRecentCodexRollouts(sessionsDir: string, options?: FindRolloutOptions): string[];
-/** Codex names rollouts `rollout-<ISO local time>-<session id>.jsonl`. */
-export declare function sessionIdFromRolloutPath(filePath: string): string | undefined;
-/** Where Codex writes its rollout JSONL files. */
-export declare function codexSessionsDir(): string;
-export declare const CODEX_LIMIT_STATE_PATH: string;
-/**
- * Record a block reported outside the sweep (the Stop path), so the next
- * prompt sweep neither re-scans the rollout nor re-posts the event.
- */
-export declare function recordCodexLimitReported(filePath: string, at: number, statePath?: string): void;
-export interface SweepArgs {
-    sessionsDir: string;
-    statePath?: string;
-    post: (payload: LimitEventPayload) => Promise<void>;
-    findOptions?: FindRolloutOptions;
-    scanOptions?: ScanOptions;
-    /** How many rollouts may actually be READ in one sweep. */
-    maxScans?: number;
-    /** Stop starting new scans once this many ms have elapsed. */
-    deadlineMs?: number;
-}
-/**
- * Report every Codex block this machine has not reported yet. Returns how many
- * events were posted. Never throws — it runs inside a hook.
- *
- * State is kept PER FILE, not as one newest-wins timestamp. A single global
- * watermark loses data: rollouts are capped per sweep, so a block in a file
- * outside the cap can be older than one already reported and would then be
- * suppressed forever. A per-file record can only ever cause a re-report, which
- * the server deduplicates on (companyId, userId, at).
- *
- * A file is recorded only after its POST succeeds, so a failed send is retried
- * on the next prompt.
- */
-export declare function sweepCodexLimits(args: SweepArgs): Promise<number>;

package/dist/codie.d.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};

package/dist/codieBrandInstall.d.ts

@@ -1,11 +0,0 @@
-/**
- * The usage module this install should load. The shipped package has the
- * compiled file; a source checkout (and the test run) has the TypeScript one.
- * Naming a path that does not exist would cost the status line silently, so a
- * miss raises instead and the caller falls back to the plain plugin.
- */
-export declare function usageModulePath(): string;
-/** The engine resolves its config dir per the XDG spec, so a customized
- * XDG_CONFIG_HOME must be honored or tui.json lands where it never reads. */
-export declare function openCodeConfigDir(): string;
-export declare function installTuiPlugin(): void;

package/dist/codieLauncher.d.ts

@@ -1,86 +0,0 @@
-export interface ModelCost {
-    /** Dollars per million prompt tokens. */
-    input: number;
-    /** Dollars per million completion tokens. */
-    output: number;
-}
-export interface ModelLimit {
-    /** Maximum prompt tokens the model accepts. */
-    context: number;
-    /** Maximum completion tokens the model emits. */
-    output: number;
-}
-export interface CatalogModel {
-    id: string;
-    name?: string;
-    cost?: ModelCost;
-    limit?: ModelLimit;
-}
-/** A rate card is usable only when both sides are real, finite and not
- * negative. Half a card prices a session wrong in a way nobody can see, so a
- * partial one is dropped and the model stays unpriced. */
-export declare function usableModelCost(value: unknown): ModelCost | undefined;
-/** A context/output window is usable only when both sides are real, finite and
- * positive. A partial window makes the engine's "% of context used" read wrong
- * in a way nobody can see, so a partial one is dropped and the model keeps the
- * engine's default. */
-export declare function usableModelLimit(value: unknown): ModelLimit | undefined;
-export declare const CODIE_SECURITY_BLOCK_MARKER = "__CODIEDEV_SECURITY_BLOCK__";
-/** Extract the private adapter marker used to carry a local block reason
- * across OpenCode's generic 500 boundary. The marker never contains prompt or
- * tool input — only the deterministic policy reason. */
-export declare function extractCodieSecurityBlock(stderr: string): string | undefined;
-/**
- * Pin non-interactive runs to the directory where `codie` was launched.
- * OpenCode can reuse a previously-known project instance; without an explicit
- * --dir, a real smoke run launched in a throwaway repo resumed the caller's
- * main checkout and executed there. TUI mode already owns its cwd directly.
- */
-export declare function withCodieWorkingDirectory(args: string[], cwd: string): string[];
-export declare function bareModel(value: unknown): string;
-export declare function buildCodieConfig({ existing, catalog, env, plugin, plugins, }: {
-    existing?: Record<string, any>;
-    catalog: CatalogModel[];
-    env?: Record<string, string | undefined>;
-    plugin?: string;
-    plugins?: string[];
-}): Record<string, any>;
-export declare const USAGE_MODULE_PLACEHOLDER = "__CODIEDEV_USAGE_MODULE__";
-/**
- * Point the staged TUI plugin at this install's usage module.
- *
- * The plugin is copied into the engine's own config directory, so it cannot
- * reach the package by a relative path — the absolute path is baked in at
- * stage time. It goes in as a JSON literal so a Windows path keeps its
- * backslashes instead of turning into escape sequences.
- */
-export declare function stageUsageModule(source: string, modulePath: string): string;
-export declare const BRAND_PLUGIN_SPEC = "./plugins/codiedev-brand.tsx";
-export declare function withBrandPlugin(existing: Record<string, any> | undefined): {
-    config: Record<string, any>;
-    changed: boolean;
-};
-export declare const STOCK_WORDMARK: string;
-export declare const LEGACY_CODIEDEV_WORDMARK: string;
-export declare const CODIEDEV_WORDMARK: string;
-export declare const HIDDEN_WORDMARK: string;
-export declare function patchBrandWordmark(binary: Buffer): {
-    changed: boolean;
-    offset: number;
-    stock: Buffer;
-    replacement: Buffer | null;
-};
-export declare function resolveCapturePlugin({ homeDir, existsSync, }: {
-    homeDir: string;
-    existsSync: (candidate: string) => boolean;
-}): string;
-export declare function fetchApprovedCatalog({ baseUrl, key, fetchImpl, }: {
-    baseUrl?: string;
-    key: string;
-    fetchImpl?: typeof fetch;
-}): Promise<CatalogModel[]>;
-export declare function parseCodieArgs(argv: string[]): {
-    args: string[];
-    overrides: Record<string, string>;
-};
-export declare function validateCodieArgs(args: string[], catalog: CatalogModel[]): void;

package/dist/codieRuntime.d.ts

@@ -1,29 +0,0 @@
-export declare const OPENCODE_RUNTIME_SPEC = "opencode-ai@1.18.4";
-export declare const OPENCODE_RUNTIME_VERSION: string;
-export declare const CODIE_MIN_NODE_MAJOR = 20;
-export type CodieRuntime = {
-    kind: "ready";
-    binary: string;
-} | {
-    kind: "missing";
-    installDir: string;
-    binary: string;
-    spec: string;
-} | {
-    kind: "outdated";
-    installDir: string;
-    binary: string;
-    spec: string;
-    currentVersion: string;
-    expectedVersion: string;
-};
-export declare function codieRuntimeDir(stateDir: string): string;
-export declare function installedRuntimePackageJson(stateDir: string): string;
-export declare function resolveCodieRuntime({ env, stateDir, existsSync, readInstalledVersion, resolveBundled, }: {
-    env: Record<string, string | undefined>;
-    stateDir: string;
-    existsSync: (candidate: string) => boolean;
-    readInstalledVersion?: (packageJson: string) => string | null;
-    resolveBundled: () => string | null;
-}): CodieRuntime;
-export declare function assertCodieNodeVersion(version: string): void;

package/dist/codieRuntimeInstall.d.ts

@@ -1,28 +0,0 @@
-import { CodieRuntime } from "./codieRuntime";
-type InstallableCodieRuntime = Exclude<CodieRuntime, {
-    kind: "ready";
-}>;
-export declare function buildRuntimeInstallArgs(stagingDir: string, spec: string): string[];
-export interface InstallDeps {
-    runtime: InstallableCodieRuntime;
-    makeStagingDir: () => string;
-    run: (args: string[]) => {
-        status: number | null;
-        stderr: string;
-    };
-    exists: (candidate: string) => boolean;
-    rename: (from: string, to: string) => void;
-    remove: (target: string) => void;
-    log: (message: string) => void;
-}
-export declare function installCodieRuntime(deps: InstallDeps): void;
-export declare function ensureCodieRuntimeBinary({ resolve, install, confirmUpdate, }: {
-    resolve: () => CodieRuntime;
-    install: (runtime: InstallableCodieRuntime) => void;
-    confirmUpdate?: (runtime: Extract<CodieRuntime, {
-        kind: "outdated";
-    }>) => Promise<boolean>;
-}): Promise<string>;
-export declare function installCodieRuntimeOnDisk(runtime: InstallableCodieRuntime, stateDir: string): void;
-export declare function defaultStagingRoot(): string;
-export {};

package/dist/codieStartup.d.ts

@@ -1,26 +0,0 @@
-import type { AgentSurface, EndpointSecurityPolicy } from "./security";
-import type { AgentSecurityEntitlement } from "./securityFeature";
-export interface CodieStartupConfig extends AgentSecurityEntitlement {
-    backendUrl?: string;
-    token?: string;
-    companyId?: string;
-    deviceId?: string;
-}
-export type CodiePolicyRefreshResult = {
-    status: "disabled";
-} | {
-    status: "synced";
-    policy: EndpointSecurityPolicy;
-} | {
-    status: "cached";
-    error: string;
-};
-/** Refresh the endpoint policy before Codie hands the terminal to OpenCode.
- * Enforcement remains available offline because hooks keep using the last
- * verified company-scoped policy when this best-effort refresh cannot land. */
-export declare function refreshCodieSecurityPolicy(config: CodieStartupConfig, syncPolicy?: (config: {
-    backendUrl: string;
-    token: string;
-    companyId: string;
-    deviceId?: string;
-}, source?: AgentSurface) => Promise<EndpointSecurityPolicy>): Promise<CodiePolicyRefreshResult>;