codiedev 0.9.34 → 0.9.35

package/dist/codie.js

@@ -231,7 +231,8 @@ async function main() {
         CODIEDEV_HEAD_SHA: git(["rev-parse", "HEAD"]),
         OPENCODE_CONFIG_CONTENT: JSON.stringify(config),
     };
-    const result = (0, child_process_1.spawnSync)(runtime, parsed.args, { stdio: "inherit", env });
+    const runtimeArgs = (0, codieLauncher_1.withCodieWorkingDirectory)(parsed.args, process.cwd());
+    const result = (0, child_process_1.spawnSync)(runtime, runtimeArgs, { stdio: "inherit", env });
     if (result.error)
         throw result.error;
     process.exitCode = result.status === null ? 1 : result.status;

package/dist/codieLauncher.d.ts

@@ -2,6 +2,13 @@ export interface CatalogModel {
     id: string;
     name?: string;
 }
+/**
+ * Pin non-interactive runs to the directory where `codie` was launched.
+ * OpenCode can reuse a previously-known project instance; without an explicit
+ * --dir, a real smoke run launched in a throwaway repo resumed the caller's
+ * main checkout and executed there. TUI mode already owns its cwd directly.
+ */
+export declare function withCodieWorkingDirectory(args: string[], cwd: string): string[];
 export declare function bareModel(value: unknown): string;
 export declare function buildCodieConfig({ existing, catalog, env, plugin, plugins, }: {
     existing?: Record<string, any>;

package/dist/codieLauncher.js

@@ -43,6 +43,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HIDDEN_WORDMARK = exports.CODIEDEV_WORDMARK = exports.LEGACY_CODIEDEV_WORDMARK = exports.STOCK_WORDMARK = exports.BRAND_PLUGIN_SPEC = void 0;
+exports.withCodieWorkingDirectory = withCodieWorkingDirectory;
 exports.bareModel = bareModel;
 exports.buildCodieConfig = buildCodieConfig;
 exports.withBrandPlugin = withBrandPlugin;
@@ -61,6 +62,19 @@ const DEFAULT_NAMES = {
     "z-ai/glm-5.2": "GLM 5.2 · Fireworks ZDR",
     "moonshotai/kimi-k2.7-code": "Kimi K2.7 Code · Fireworks ZDR",
 };
+/**
+ * Pin non-interactive runs to the directory where `codie` was launched.
+ * OpenCode can reuse a previously-known project instance; without an explicit
+ * --dir, a real smoke run launched in a throwaway repo resumed the caller's
+ * main checkout and executed there. TUI mode already owns its cwd directly.
+ */
+function withCodieWorkingDirectory(args, cwd) {
+    if (args[0] !== "run")
+        return args;
+    if (args.some((arg) => arg === "--dir" || arg.startsWith("--dir=")))
+        return args;
+    return [...args, "--dir", cwd];
+}
 function cleanBaseUrl(value) {
     return String(value || "https://gateway.codiedev.com/api/v1").replace(/\/+$/, "");
 }

package/dist/hook.js

@@ -661,6 +661,7 @@ async function runCaptureFinishInner(input, config, session_id, transcript_path,
     // worktree's branch+sha so all the resulting PRs attribute. branch/headSha
     // remain the primary (most-recent) values for back-compat.
     const keys = (0, utils_1.collectCaptureKeys)(captureDirs);
+    const gitRefs = (0, utils_1.collectCaptureGitRefs)(captureDirs);
     // Union the worktree-dir branches with the branches the agent actually
     // committed/pushed to (parsed from the transcript's git output). Like the
     // SHAs below, these are independent of end-of-session filesystem state, so
@@ -678,6 +679,7 @@ async function runCaptureFinishInner(input, config, session_id, transcript_path,
     const authoredShas = (0, utils_1.parseAuthoredShas)(transcriptContent, workspaceRoot);
     const headShas = [...new Set([...keys.headShas, ...authoredShas])];
     const headSha = keys.headSha ?? headShas[0] ?? null;
+    const pullRequestUrls = (0, utils_1.parsePullRequestUrls)(transcriptContent);
     // Cost/velocity/steering signals parsed straight from the transcript we're
     // already holding — no extra hooks, no extra git/process calls. parseUsage
     // keeps the literal mode (it has its own desktop parser) and reads the RAW
@@ -700,6 +702,8 @@ async function runCaptureFinishInner(input, config, session_id, transcript_path,
         headSha,
         branches,
         headShas,
+        gitRefs,
+        pullRequestUrls,
         inputTokens: usage.inputTokens,
         outputTokens: usage.outputTokens,
         cacheTokens: usage.cacheTokens,

package/dist/utils.d.ts

@@ -45,6 +45,13 @@ export declare function collectCaptureKeys(dirs: string[], getBranch?: (d: strin
     branches: string[];
     headShas: string[];
 };
+export type CaptureGitRef = {
+    repoUrl: string;
+    branch?: string;
+    headSha?: string;
+};
+export declare function collectCaptureGitRefs(dirs: string[], getRemote?: (d: string) => string | null, getBranch?: (d: string) => string | null, getSha?: (d: string) => string | null): CaptureGitRef[];
+export declare function parsePullRequestUrls(transcriptContent: string): string[];
 export declare function extractShaTokens(transcriptContent: string): string[];
 export declare function parseAuthoredBranches(transcriptContent: string): string[];
 export declare function parseAuthoredShas(transcriptContent: string, repoRoot: string, resolveFullBatch?: (shas: string[]) => Map<string, string>): string[];
@@ -64,6 +71,8 @@ export interface CapturePayloadInput {
     headSha?: string | null;
     branches?: string[];
     headShas?: string[];
+    gitRefs?: CaptureGitRef[];
+    pullRequestUrls?: string[];
     inputTokens?: number;
     outputTokens?: number;
     cacheTokens?: number;

package/dist/utils.js

@@ -46,6 +46,8 @@ exports.matchRepo = matchRepo;
 exports.resolveCaptureDir = resolveCaptureDir;
 exports.resolveCaptureDirs = resolveCaptureDirs;
 exports.collectCaptureKeys = collectCaptureKeys;
+exports.collectCaptureGitRefs = collectCaptureGitRefs;
+exports.parsePullRequestUrls = parsePullRequestUrls;
 exports.extractShaTokens = extractShaTokens;
 exports.parseAuthoredBranches = parseAuthoredBranches;
 exports.parseAuthoredShas = parseAuthoredShas;
@@ -450,6 +452,144 @@ function collectCaptureKeys(dirs, getBranch = getGitBranch, getSha = getGitHeadS
     }
     return { branch: branches[0] ?? null, headSha: headShas[0] ?? null, branches, headShas };
 }
+function collectCaptureGitRefs(dirs, getRemote = getGitRemoteUrl, getBranch = getGitBranch, getSha = getGitHeadSha) {
+    const out = [];
+    const seen = new Set();
+    for (const dir of dirs) {
+        const repoUrl = getRemote(dir)?.trim();
+        if (!repoUrl)
+            continue;
+        const branch = getBranch(dir)?.trim() || undefined;
+        const headSha = getSha(dir)?.trim().toLowerCase() || undefined;
+        if (!branch && !headSha)
+            continue;
+        const key = `${normalizeRepoUrl(repoUrl).toLowerCase()}::${branch ?? ""}::${headSha ?? ""}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push({ repoUrl, ...(branch ? { branch } : {}), ...(headSha ? { headSha } : {}) });
+    }
+    return out;
+}
+// Exact PR/MR URLs are the strongest provenance the transcript can provide.
+// Both `gh pr create` and `glab mr create` print one, and the OpenCode capture
+// is normalized through the same parser as Claude Code. A direct URL survives
+// branch deletion, squash/rebase, cherry-picks, and SessionEnd happening after
+// the PR was opened.
+function parsePullRequestUrls(transcriptContent) {
+    const out = [];
+    const createToolIds = new Set();
+    const isCreateCommand = (command) => {
+        if (typeof command !== "string")
+            return false;
+        // A combined `gh pr view || gh pr create` result is ambiguous: when the PR
+        // already exists, the VIEW half prints its URL and CREATE never runs.
+        if (/\b(?:gh\s+pr\s+(?:view|list|status)|glab\s+mr\s+(?:view|list))\b/i.test(command)) {
+            return false;
+        }
+        return command.split(/&&|\|\||;|\n/).some((statement) => /^(?:(?:env\s+)?[A-Z_][A-Z0-9_]*=\S+\s+)*(?:gh\s+pr\s+create|glab\s+mr\s+create)\b/i
+            .test(statement.trim()));
+    };
+    const scanText = (text) => {
+        const normalized = text.replace(/\\\//g, "/");
+        const candidates = normalized.match(/https?:\/\/[^\s<>"']+/gi) ?? [];
+        for (const raw of candidates) {
+            const trimmed = raw.replace(/[),.;:\]}]+$/g, "");
+            try {
+                const url = new URL(trimmed);
+                const path = url.pathname.replace(/\/+$/, "");
+                const isGithubPr = /^\/.+\/pull\/\d+$/i.test(path);
+                const isGitlabMr = /^\/.+\/-\/merge_requests\/\d+$/i.test(path);
+                if (!isGithubPr && !isGitlabMr)
+                    continue;
+                const canonical = `${url.protocol}//${url.host}${path}`;
+                if (!out.includes(canonical))
+                    out.push(canonical);
+            }
+            catch {
+                // Malformed tool output is ignored; capture remains best-effort.
+            }
+        }
+    };
+    const scanContent = (value) => {
+        if (typeof value === "string") {
+            scanText(value);
+            return;
+        }
+        if (!Array.isArray(value))
+            return;
+        for (const part of value) {
+            if (typeof part === "string")
+                scanText(part);
+            else if (part && typeof part === "object") {
+                const text = part.text;
+                if (typeof text === "string")
+                    scanText(text);
+            }
+        }
+    };
+    const entries = [];
+    for (const line of transcriptContent.split("\n")) {
+        if (!line.trim())
+            continue;
+        try {
+            const entry = JSON.parse(line);
+            entries.push(entry);
+            const content = entry?.message?.content;
+            if (Array.isArray(content)) {
+                for (const block of content) {
+                    if (block?.type === "tool_use"
+                        && typeof block.id === "string"
+                        && isCreateCommand(block.input?.command)) {
+                        createToolIds.add(block.id);
+                    }
+                }
+            }
+            // Codex function calls carry arguments as serialized JSON.
+            if (entry?.type === "response_item"
+                && entry?.payload?.type === "function_call"
+                && typeof entry.payload.call_id === "string") {
+                let args = entry.payload.arguments;
+                if (typeof args === "string") {
+                    try {
+                        args = JSON.parse(args);
+                    }
+                    catch { /* leave as string */ }
+                }
+                if (isCreateCommand(args?.cmd ?? args?.command ?? args)) {
+                    createToolIds.add(entry.payload.call_id);
+                }
+            }
+        }
+        catch {
+            // Never regex the raw line: prompts and assistant prose can contain a PR
+            // URL, but only actual tool output is provenance.
+        }
+    }
+    // Second pass: a URL is proof only when it came from the result of the
+    // specific gh/glab CREATE call above. `gh pr view/list` also prints URLs and
+    // must never claim somebody else's already-existing PR for this session.
+    for (const entry of entries) {
+        const content = entry?.message?.content;
+        if (Array.isArray(content)) {
+            for (const block of content) {
+                if (block?.type === "tool_result"
+                    && typeof block.tool_use_id === "string"
+                    && createToolIds.has(block.tool_use_id)
+                    && block.is_error !== true) {
+                    scanContent(block.content);
+                }
+            }
+        }
+        if (entry?.type === "response_item"
+            && entry?.payload?.type === "function_call_output"
+            && typeof entry.payload.call_id === "string"
+            && createToolIds.has(entry.payload.call_id)) {
+            scanContent(entry.payload.output);
+        }
+    }
+    return out;
+}
 // Pull the commit SHAs the agent actually authored/pushed straight out of the
 // transcript's git command OUTPUT — independent of end-of-session filesystem
 // state. Catches: commit output "[branch 4c4e790]", push ranges
@@ -690,6 +830,10 @@ function buildCapturePayload(input) {
         // see no change; newer servers index the session under every key.
         branches: input.branches && input.branches.length ? input.branches : undefined,
         headShas: input.headShas && input.headShas.length ? input.headShas : undefined,
+        gitRefs: input.gitRefs && input.gitRefs.length ? input.gitRefs : undefined,
+        pullRequestUrls: input.pullRequestUrls && input.pullRequestUrls.length
+            ? input.pullRequestUrls
+            : undefined,
         transcript: input.transcriptBase64,
         messageCount: input.messageCount,
         toolCallCount: input.toolCallCount,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codiedev",
-  "version": "0.9.34",
+  "version": "0.9.35",
   "description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness",
   "bin": {
     "codiedev": "dist/cli.js",

package/dist/scope.d.ts

@@ -1,8 +0,0 @@
-export interface ScopeInfo {
-    workspaceName: string;
-    matchedRepo: {
-        fullName: string;
-    } | null;
-}
-export declare function formatScope(info: ScopeInfo): string;
-export declare function printScope(info: ScopeInfo): void;

package/dist/scope.js

@@ -1,15 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.formatScope = formatScope;
-exports.printScope = printScope;
-function formatScope(info) {
-    if (!info.workspaceName)
-        return "→ unknown workspace";
-    if (info.matchedRepo) {
-        return `→ ${info.workspaceName} (matched ${info.matchedRepo.fullName})`;
-    }
-    return `→ ${info.workspaceName} (default profile, no repo match)`;
-}
-function printScope(info) {
-    console.log(formatScope(info));
-}

package/dist/security.d.ts

@@ -1,34 +0,0 @@
-export type SecurityHookPhase = "pre" | "post" | "failure";
-export type AgentSurface = "claude-code" | "codex";
-export interface RawSecurityHookInput {
-    session_id?: string;
-    sessionId?: string;
-    cwd?: string;
-    hook_event_name?: string;
-    hookEventName?: string;
-    tool_name?: string;
-    toolName?: string;
-    tool_input?: unknown;
-    toolInput?: unknown;
-    tool_response?: unknown;
-    toolResponse?: unknown;
-    tool_use_id?: string;
-    toolUseId?: string;
-    duration_ms?: number;
-    durationMs?: number;
-    error?: unknown;
-}
-export interface SecurityWorkflowEvent {
-    schemaVersion: 1;
-    source: AgentSurface;
-    phase: SecurityHookPhase;
-    sessionId: string;
-    toolName: string;
-    toolUseId?: string;
-    cwd?: string;
-    observedAt: number;
-    toolDurationMs?: number;
-    payload: unknown;
-    redactionCount: number;
-}
-export declare function buildSecurityWorkflowEvent(input: RawSecurityHookInput, phase: SecurityHookPhase, source: AgentSurface, now?: () => number): SecurityWorkflowEvent | null;

package/dist/security.js

@@ -1,119 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildSecurityWorkflowEvent = buildSecurityWorkflowEvent;
-const crypto = __importStar(require("crypto"));
-const SECRET_KEY = /(?:api[_-]?key|access[_-]?token|auth[_-]?token|password|passwd|secret|private[_-]?key|client[_-]?secret)/i;
-const SECRET_VALUE_PATTERNS = [
-    /\b(?:sk|rk|pk)-(?:live|test|proj)?[-_A-Za-z0-9]{16,}\b/g,
-    /\bgh[opusr]_[A-Za-z0-9]{20,}\b/g,
-    /\bAKIA[0-9A-Z]{16}\b/g,
-    /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/g,
-    /\bBearer\s+[A-Za-z0-9._~+\/-]{16,}=*\b/gi,
-];
-function fingerprint(value) {
-    return crypto.createHash("sha256").update(value).digest("hex").slice(0, 12);
-}
-function redactString(value) {
-    let count = 0;
-    let redacted = value;
-    for (const pattern of SECRET_VALUE_PATTERNS) {
-        redacted = redacted.replace(pattern, (match) => {
-            count += 1;
-            return `[REDACTED_SECRET:${fingerprint(match)}]`;
-        });
-    }
-    // Keep hook payloads bounded. Full transcripts already use Codie's existing
-    // capture path; the detector only needs immediate causal context here.
-    if (redacted.length > 16_384)
-        redacted = `${redacted.slice(0, 16_384)}[TRUNCATED]`;
-    return { value: redacted, count };
-}
-function redact(value, key = "", depth = 0) {
-    if (depth > 8)
-        return { value: "[TRUNCATED_DEPTH]", count: 0 };
-    if (SECRET_KEY.test(key) && value !== null && value !== undefined) {
-        const text = typeof value === "string" ? value : JSON.stringify(value);
-        return { value: `[REDACTED_SECRET:${fingerprint(text)}]`, count: 1 };
-    }
-    if (typeof value === "string")
-        return redactString(value);
-    if (Array.isArray(value)) {
-        let count = 0;
-        const next = value.slice(0, 200).map((item) => {
-            const result = redact(item, key, depth + 1);
-            count += result.count;
-            return result.value;
-        });
-        return { value: next, count };
-    }
-    if (value && typeof value === "object") {
-        let count = 0;
-        const next = {};
-        for (const [childKey, childValue] of Object.entries(value).slice(0, 200)) {
-            const result = redact(childValue, childKey, depth + 1);
-            count += result.count;
-            next[childKey] = result.value;
-        }
-        return { value: next, count };
-    }
-    return { value, count: 0 };
-}
-function buildSecurityWorkflowEvent(input, phase, source, now = Date.now) {
-    const sessionId = input.session_id ?? input.sessionId ?? "";
-    const toolName = input.tool_name ?? input.toolName ?? "";
-    if (!sessionId || !toolName)
-        return null;
-    const rawPayload = {
-        input: input.tool_input ?? input.toolInput,
-        ...(phase === "post" ? { response: input.tool_response ?? input.toolResponse } : {}),
-        ...(phase === "failure" ? { error: input.error ?? input.tool_response ?? input.toolResponse } : {}),
-    };
-    const sanitized = redact(rawPayload);
-    const duration = input.duration_ms ?? input.durationMs;
-    return {
-        schemaVersion: 1,
-        source,
-        phase,
-        sessionId,
-        toolName,
-        toolUseId: input.tool_use_id ?? input.toolUseId,
-        cwd: input.cwd,
-        observedAt: now(),
-        toolDurationMs: typeof duration === "number" && Number.isFinite(duration) ? duration : undefined,
-        payload: sanitized.value,
-        redactionCount: sanitized.count,
-    };
-}