codiedev 0.9.36 → 0.9.38

package/dist/commands/doctor.js

@@ -46,6 +46,7 @@ const upgradeNudge_1 = require("../upgradeNudge");
 const captureReadiness_1 = require("../captureReadiness");
 const captureLog_1 = require("../captureLog");
 const securityDoctor_1 = require("../securityDoctor");
+const securityFeature_1 = require("../securityFeature");
 const CLAUDE_SETTINGS_PATH = path.join(os.homedir(), ".claude", "settings.json");
 const CLAUDE_INSTRUCTIONS_PATH = path.join(os.homedir(), ".claude", "CLAUDE.md");
 const CODEX_HOOKS_PATH = path.join(os.homedir(), ".codex", "hooks.json");
@@ -486,7 +487,9 @@ async function runDoctor(_args) {
     // Agent Security is part of installation health, not a separate setup
     // concept. Keep `codiedev security doctor` as an alias for focused output,
     // while the main doctor remains the one command users need to remember.
-    checks.push(...(0, securityDoctor_1.securityDoctorChecks)((0, securityDoctor_1.collectSecurityDoctorReport)()));
+    if ((0, securityFeature_1.isAgentSecurityEnabled)(config)) {
+        checks.push(...(0, securityDoctor_1.securityDoctorChecks)((0, securityDoctor_1.collectSecurityDoctorReport)(config.companyId)));
+    }
     // 8. gh / glab CLIs (optional — only needed for reverse-ticket from a
     // specific PR/MR URL; branch mode works without either).
     checks.push({

package/dist/commands/security.js

@@ -8,6 +8,7 @@ const securityInventory_1 = require("../securityInventory");
 const securityDeepScan_1 = require("../securityDeepScan");
 const utils_1 = require("../utils");
 const securityDoctor_1 = require("../securityDoctor");
+const securityFeature_1 = require("../securityFeature");
 function printPilot(json) {
     const report = (0, securityPilot_1.runSyntheticSecurityPilot)();
     if (json) {
@@ -22,8 +23,8 @@ function printPilot(json) {
     console.log("No commands were executed and no real credentials were used.\n");
     return report.ok;
 }
-function printDoctor(json) {
-    const result = (0, securityDoctor_1.collectSecurityDoctorReport)();
+function printDoctor(json, companyId) {
+    const result = (0, securityDoctor_1.collectSecurityDoctorReport)(companyId);
     if (json) {
         console.log(JSON.stringify(result, null, 2));
         return result.ok;
@@ -39,6 +40,18 @@ function printDoctor(json) {
 async function runSecurityCommand(args) {
     const subcommand = args.find((arg) => !arg.startsWith("-")) ?? "doctor";
     const json = args.includes("--json");
+    const connectedConfig = (0, utils_1.readConfig)();
+    const requiresEntitlement = !["pilot", "self-test"].includes(subcommand);
+    if (requiresEntitlement && (!connectedConfig || !(0, securityFeature_1.isAgentSecurityEnabled)(connectedConfig))) {
+        const detail = connectedConfig
+            ? `Agent Security is not enabled for ${connectedConfig.companyName}.`
+            : "Not connected. Run `codiedev connect` first.";
+        if (json)
+            console.log(JSON.stringify({ schemaVersion: 1, enabled: false, detail }, null, 2));
+        else
+            console.log(`\n${detail}\n`);
+        return;
+    }
     if (subcommand === "inventory" || subcommand === "scan") {
         const workspaceFlag = args.indexOf("--workspace");
         const workspace = workspaceFlag >= 0 && args[workspaceFlag + 1]
@@ -128,7 +141,7 @@ async function runSecurityCommand(args) {
     const ok = subcommand === "pilot" || subcommand === "self-test"
         ? printPilot(json)
         : subcommand === "doctor" || subcommand === "status"
-            ? printDoctor(json)
+            ? printDoctor(json, connectedConfig.companyId)
             : false;
     if (!["pilot", "self-test", "doctor", "status"].includes(subcommand)) {
         console.error("Usage: codiedev security <doctor|pilot|inventory|scan|sync|rollback> [--json] [--deep] [--connect-mcp] [--supply-chain] [--no-upload] [--yes]");

package/dist/connect.js

@@ -48,6 +48,7 @@ const upgradeNudge_1 = require("./upgradeNudge");
 const shared_1 = require("./commands/shared");
 const securityInstall_1 = require("./securityInstall");
 const securityPolicy_1 = require("./securityPolicy");
+const securityFeature_1 = require("./securityFeature");
 // cli.codiedev.com is a Convex custom domain on the prod deployment; the
 // underlying judicious-falcon-861.convex.site URL keeps serving, so configs
 // written by older CLI versions stay valid without a re-connect.
@@ -204,6 +205,7 @@ async function runConnect(args = []) {
     // Extract fields from response
     const companyId = responseData.companyId;
     const companyName = responseData.companyName;
+    const agentSecurityEnabled = responseData.agentSecurityEnabled === true;
     const repos = responseData.repos ?? [];
     if (!companyId || !companyName) {
         console.error("\nError: Invalid response from server. Token may be invalid.");
@@ -216,6 +218,7 @@ async function runConnect(args = []) {
         repos,
         lastSynced: new Date().toISOString(),
         backendUrl: BACKEND_URL,
+        agentSecurityEnabled,
         deviceId: saved?.deviceId || crypto.randomUUID(),
         deviceName: saved?.deviceName || os.hostname(),
         captureIgnoredPaths: saved?.captureIgnoredPaths ?? [],
@@ -315,11 +318,11 @@ async function runConnect(args = []) {
         }
     };
     if (hasClaude) {
-        runInstall("claude-code-hook", utils_1.installHook, "Claude Code SessionEnd (capture) + UserPromptSubmit (skill discovery) + Stop (auto-backup) hooks (~/.claude/settings.json)", "claudeCode-hook");
+        runInstall("claude-code-hook", () => (0, utils_1.installHook)(agentSecurityEnabled), "Claude Code SessionEnd (capture) + UserPromptSubmit (skill discovery) + Stop (auto-backup) hooks (~/.claude/settings.json)", "claudeCode-hook");
         runInstall("claude-code-instructions", utils_1.installClaudeCodeInstructions, "Claude Code agent instructions (~/.claude/CLAUDE.md)", "claudeCode-instructions");
     }
     if (hasCodex) {
-        runInstall("codex-hook", utils_1.installCodexHook, "Codex Stop (capture + auto-backup) hooks (~/.codex/hooks.json)", "codex-hook");
+        runInstall("codex-hook", () => (0, utils_1.installCodexHook)(agentSecurityEnabled), "Codex Stop (capture + auto-backup) hooks (~/.codex/hooks.json)", "codex-hook");
         runInstall("codex-instructions", utils_1.installCodexInstructions, "Codex agent instructions (~/.codex/AGENTS.md)", "codex-instructions");
     }
     if (hasCursor) {
@@ -329,13 +332,13 @@ async function runConnect(args = []) {
     // Always stage the adapter. It is dormant until OpenCode starts, which lets
     // a user connect Claude Code today and install the Codie harness tomorrow
     // without needing a second setup ritual.
-    runInstall("opencode-capture-adapter", utils_1.installOpenCodeCapturePlugin, "OpenCode session capture adapter (~/.config/opencode/plugins/codiedev.js)", "opencode-capture");
+    runInstall("opencode-capture-adapter", () => (0, utils_1.installOpenCodeCapturePlugin)(agentSecurityEnabled), "OpenCode session capture adapter (~/.config/opencode/plugins/codiedev.js)", "opencode-capture");
     // Record the exact installed hook bytes and the pre-update rollback files.
     // This supplies health/integrity checks without requiring a package publish
     // or trusting whichever `node` happens to be first on PATH later.
     try {
         const hookScriptPath = path.join(__dirname, "hook.js");
-        if (fs.existsSync(hookScriptPath)) {
+        if (agentSecurityEnabled && fs.existsSync(hookScriptPath)) {
             const targets = [];
             if (installedTargets.includes("claudeCode-hook"))
                 targets.push({ surface: "claude-code", configPath: securityConfigPaths[0] });
@@ -351,11 +354,13 @@ async function runConnect(args = []) {
     }
     // Prime the local cache after installation. Hooks read this file only, so
     // an endpoint decision never depends on live network latency.
-    try {
-        await (0, securityPolicy_1.syncEndpointSecurityPolicy)(config);
-    }
-    catch (err) {
-        console.warn(`Warning: Agent-security policy will use safe defaults until sync succeeds — ${err.message}`);
+    if (agentSecurityEnabled) {
+        try {
+            await (0, securityPolicy_1.syncEndpointSecurityPolicy)(config);
+        }
+        catch (err) {
+            console.warn(`Warning: Agent-security policy will use safe defaults until sync succeeds — ${err.message}`);
+        }
     }
     // Tell the backend which targets we wired up so the portal's onboarding
     // card flips to "Connected" only when something actually installed —
@@ -395,6 +400,8 @@ async function runConnect(args = []) {
     }
     console.log();
     console.log("Run `codiedev doctor` to verify everything's wired up.");
-    console.log("Run `codiedev security pilot` to validate blocking safely.");
+    if ((0, securityFeature_1.isAgentSecurityEnabled)(config)) {
+        console.log("Run `codiedev security pilot` to validate blocking safely.");
+    }
     console.log();
 }

package/dist/hook.js

@@ -48,6 +48,7 @@ const captureLog_1 = require("./captureLog");
 const security_1 = require("./security");
 const securitySession_1 = require("./securitySession");
 const securityPolicy_1 = require("./securityPolicy");
+const securityFeature_1 = require("./securityFeature");
 const securityInventory_1 = require("./securityInventory");
 const captureExclusions_1 = require("./captureExclusions");
 // Pure builder for the discovery additionalContext. Returns null when there are
@@ -269,9 +270,13 @@ function postJsonForResponse(url, body, bearerToken, timeoutMs) {
 // is dispatched separately and fail-open, so a detector outage or timeout can
 // never delay or override the deterministic endpoint decision.
 async function runSecurityHook(hookInput, phase, source) {
+    const config = (0, utils_1.readConfig)();
+    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
+        return;
+    const policy = (0, securityPolicy_1.readEndpointSecurityPolicy)(undefined, undefined, config.companyId);
     const sessionId = hookInput.session_id ?? hookInput.sessionId;
     const sessionSignal = phase === "pre" ? (0, securitySession_1.readSessionSecuritySignal)(sessionId) : undefined;
-    const localDecision = (0, security_1.evaluateToolSecurity)(hookInput, phase, (0, securityPolicy_1.readEndpointSecurityPolicy)(), source, sessionSignal);
+    const localDecision = (0, security_1.evaluateToolSecurity)(hookInput, phase, policy, source, sessionSignal);
     if (phase === "post" && (0, security_1.securityInputHasSensitivePath)(hookInput)) {
         (0, securitySession_1.recordSensitiveReadSignal)(sessionId);
     }
@@ -302,7 +307,10 @@ async function runSecurityHook(hookInput, phase, source) {
     dispatchSecurityEventUpload(event);
 }
 function runPromptSecurityHook(hookInput, source) {
-    const decision = (0, security_1.evaluatePromptSecurity)(hookInput.prompt, (0, securityPolicy_1.readEndpointSecurityPolicy)(), source);
+    const config = (0, utils_1.readConfig)();
+    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
+        return false;
+    const decision = (0, security_1.evaluatePromptSecurity)(hookInput.prompt, (0, securityPolicy_1.readEndpointSecurityPolicy)(undefined, undefined, config.companyId), source);
     if (decision.action !== "block")
         return false;
     dispatchSecurityEventUpload((0, security_1.buildBlockedSecurityPromptEvent)(hookInput, source, decision.category ?? "secret_in_prompt"));
@@ -313,12 +321,15 @@ function runPromptSecurityHook(hookInput, source) {
     return true;
 }
 function dispatchAllowedPromptSecurityEvent(hookInput, source) {
-    const event = (0, security_1.buildSecurityPromptEvent)(hookInput, source, Date.now, (0, securityPolicy_1.readEndpointSecurityPolicy)());
+    const config = (0, utils_1.readConfig)();
+    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
+        return;
+    const event = (0, security_1.buildSecurityPromptEvent)(hookInput, source, Date.now, (0, securityPolicy_1.readEndpointSecurityPolicy)(undefined, undefined, config.companyId));
     if (event)
         dispatchSecurityEventUpload(event);
 }
 function dispatchSecurityEventUpload(event) {
-    if (!event || !(0, utils_1.readConfig)())
+    if (!event || !(0, securityFeature_1.isAgentSecurityEnabled)((0, utils_1.readConfig)()))
         return;
     try {
         const child = (0, child_process_1.spawn)(process.execPath, [process.argv[1], "security-upload"], {
@@ -334,7 +345,7 @@ function dispatchSecurityEventUpload(event) {
 }
 async function runSecurityEventUpload() {
     const config = (0, utils_1.readConfig)();
-    if (!config)
+    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
         return;
     const startedAt = Date.now();
     try {
@@ -346,8 +357,9 @@ async function runSecurityEventUpload() {
             cliVersion: version_1.CLI_VERSION,
         });
         const result = await postJsonForResponse(`${config.backendUrl}/api/cli/securityEvent`, { ...eventWithEndpoint }, config.token, 1500);
-        if (result?.policy?.schemaVersion === 1)
-            (0, securityPolicy_1.writeEndpointSecurityPolicy)(result.policy);
+        if (result?.policy?.schemaVersion === 1) {
+            (0, securityPolicy_1.writeEndpointSecurityPolicy)(result.policy, undefined, undefined, config.companyId);
+        }
         (0, captureLog_1.appendCaptureLog)({
             stage: "security",
             sessionId: event.sessionId,
@@ -492,7 +504,7 @@ async function main() {
     // waits for filesystem traversal or an inventory upload.
     if (process.argv[2] === "security-inventory-upload") {
         const config = (0, utils_1.readConfig)();
-        if (config) {
+        if (config && (0, securityFeature_1.isAgentSecurityEnabled)(config)) {
             const inventory = (0, securityInventory_1.buildSecurityInventory)({ workspace: process.argv[3] || process.cwd() });
             try {
                 await (0, securityInventory_1.uploadSecurityInventory)(inventory, config);
@@ -597,7 +609,7 @@ async function main() {
     }
     // SessionStart: post the capture-coverage denominator ping. Tiny + fast.
     if (process.argv[2] === "session-start" || process.argv[2] === "session-start-opencode") {
-        if ((0, securityInventory_1.securityInventoryDue)()) {
+        if ((0, securityFeature_1.isAgentSecurityEnabled)((0, utils_1.readConfig)()) && (0, securityInventory_1.securityInventoryDue)()) {
             try {
                 const child = (0, child_process_1.spawn)(process.execPath, [process.argv[1], "security-inventory-upload", hookInput.cwd || process.cwd()], {
                     detached: true,

package/dist/securityDoctor.d.ts

@@ -27,6 +27,6 @@ export interface SecurityDoctorReport {
     };
 }
 /** One security-health model shared by `doctor` and its legacy alias. */
-export declare function collectSecurityDoctorReport(): SecurityDoctorReport;
+export declare function collectSecurityDoctorReport(companyId?: string): SecurityDoctorReport;
 /** Convert security health into the same compact rows used by core doctor. */
 export declare function securityDoctorChecks(report: SecurityDoctorReport): SecurityDoctorCheck[];

package/dist/securityDoctor.js

@@ -6,12 +6,12 @@ const securityInstall_1 = require("./securityInstall");
 const securityPilot_1 = require("./securityPilot");
 const securityPolicy_1 = require("./securityPolicy");
 /** One security-health model shared by `doctor` and its legacy alias. */
-function collectSecurityDoctorReport() {
+function collectSecurityDoctorReport(companyId) {
     const manifest = (0, securityInstall_1.readSecurityInstallManifest)();
     const integrity = (0, securityInstall_1.verifySecurityInstallManifest)(manifest);
     const installations = (0, securityInstall_1.inspectSecurityInstallation)();
     const pilot = (0, securityPilot_1.runSyntheticSecurityPilot)();
-    const policy = (0, securityPolicy_1.inspectEndpointSecurityPolicy)();
+    const policy = (0, securityPolicy_1.inspectEndpointSecurityPolicy)(undefined, undefined, companyId);
     const ok = integrity.ok &&
         policy.verification.ok &&
         pilot.ok &&

package/dist/securityFeature.d.ts

@@ -0,0 +1,5 @@
+export interface AgentSecurityEntitlement {
+    agentSecurityEnabled?: boolean;
+}
+/** Security is opt-in per company. Missing/stale entitlement data is dormant. */
+export declare function isAgentSecurityEnabled(config: AgentSecurityEntitlement | null | undefined): boolean;

package/dist/securityFeature.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAgentSecurityEnabled = isAgentSecurityEnabled;
+/** Security is opt-in per company. Missing/stale entitlement data is dormant. */
+function isAgentSecurityEnabled(config) {
+    return config?.agentSecurityEnabled === true;
+}

package/dist/securityInstall.js

@@ -177,7 +177,7 @@ function inspectJsonSurface(surface, filePath) {
         const parsed = JSON.parse(fs.readFileSync(filePath, "utf8"));
         const suffix = surface === "codex" ? "-codex" : "";
         const expected = [
-            ["UserPromptSubmit", "discover"],
+            ["UserPromptSubmit", `discover${suffix}`],
             ["PreToolUse", `security-pre${suffix}`],
             ["PostToolUse", `security-post${suffix}`],
             ["PostToolUseFailure", `security-failure${suffix}`],

package/dist/securityPolicy.d.ts

@@ -6,8 +6,8 @@ export declare function verifyEndpointSecurityPolicySignature(policy: EndpointSe
     trusted: boolean;
     detail: string;
 };
-export declare function readEndpointSecurityPolicy(stateDir?: string, trustedKeys?: TrustedPolicyKeys): EndpointSecurityPolicy | undefined;
-export declare function inspectEndpointSecurityPolicy(stateDir?: string, trustedKeys?: TrustedPolicyKeys): {
+export declare function readEndpointSecurityPolicy(stateDir?: string, trustedKeys?: TrustedPolicyKeys, companyId?: string): EndpointSecurityPolicy | undefined;
+export declare function inspectEndpointSecurityPolicy(stateDir?: string, trustedKeys?: TrustedPolicyKeys, companyId?: string): {
     exists: boolean;
     policy?: EndpointSecurityPolicy;
     verification: {
@@ -16,8 +16,9 @@ export declare function inspectEndpointSecurityPolicy(stateDir?: string, trusted
         detail: string;
     };
 };
-export declare function writeEndpointSecurityPolicy(policy: EndpointSecurityPolicy, stateDir?: string, trustedKeys?: TrustedPolicyKeys): void;
+export declare function writeEndpointSecurityPolicy(policy: EndpointSecurityPolicy, stateDir?: string, trustedKeys?: TrustedPolicyKeys, companyId?: string): void;
 export declare function syncEndpointSecurityPolicy(config: {
     backendUrl: string;
     token: string;
+    companyId: string;
 }, source?: AgentSurface, timeoutMs?: number): Promise<EndpointSecurityPolicy>;

package/dist/securityPolicy.js

@@ -46,6 +46,12 @@ const https = __importStar(require("https"));
 const path = __importStar(require("path"));
 const configDir_1 = require("./configDir");
 const POLICY_FILE = "security-policy.json";
+function policyFile(companyId) {
+    if (!companyId)
+        return POLICY_FILE;
+    const scope = companyId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128);
+    return `security-policy.${scope}.json`;
+}
 function stableJson(value) {
     if (Array.isArray(value))
         return `[${value.map(stableJson).join(",")}]`;
@@ -96,12 +102,12 @@ function verifyEndpointSecurityPolicySignature(policy, trustedKeys = trustedPoli
         return { ok: false, trusted: false, detail: `policy signature could not be verified: ${error.message}` };
     }
 }
-function readEndpointSecurityPolicy(stateDir = (0, configDir_1.codiedevStateDir)(), trustedKeys = trustedPolicyKeysFromEnvironment()) {
-    const inspection = inspectEndpointSecurityPolicy(stateDir, trustedKeys);
+function readEndpointSecurityPolicy(stateDir = (0, configDir_1.codiedevStateDir)(), trustedKeys = trustedPolicyKeysFromEnvironment(), companyId) {
+    const inspection = inspectEndpointSecurityPolicy(stateDir, trustedKeys, companyId);
     return inspection.verification.ok ? inspection.policy : undefined;
 }
-function inspectEndpointSecurityPolicy(stateDir = (0, configDir_1.codiedevStateDir)(), trustedKeys = trustedPolicyKeysFromEnvironment()) {
-    const target = path.join(stateDir, POLICY_FILE);
+function inspectEndpointSecurityPolicy(stateDir = (0, configDir_1.codiedevStateDir)(), trustedKeys = trustedPolicyKeysFromEnvironment(), companyId) {
+    const target = path.join(stateDir, policyFile(companyId));
     if (!fs.existsSync(target)) {
         return { exists: false, verification: { ok: true, trusted: false, detail: "no cached endpoint policy" } };
     }
@@ -117,12 +123,12 @@ function inspectEndpointSecurityPolicy(stateDir = (0, configDir_1.codiedevStateD
         return { exists: true, verification: { ok: false, trusted: false, detail: `cached endpoint policy could not be read: ${error.message}` } };
     }
 }
-function writeEndpointSecurityPolicy(policy, stateDir = (0, configDir_1.codiedevStateDir)(), trustedKeys = trustedPolicyKeysFromEnvironment()) {
+function writeEndpointSecurityPolicy(policy, stateDir = (0, configDir_1.codiedevStateDir)(), trustedKeys = trustedPolicyKeysFromEnvironment(), companyId) {
     const verification = verifyEndpointSecurityPolicySignature(policy, trustedKeys);
     if (!verification.ok)
         throw new Error(`Refusing untrusted endpoint policy: ${verification.detail}`);
     fs.mkdirSync(stateDir, { recursive: true, mode: 0o700 });
-    const target = path.join(stateDir, POLICY_FILE);
+    const target = path.join(stateDir, policyFile(companyId));
     const temporary = `${target}.${process.pid}.tmp`;
     fs.writeFileSync(temporary, `${JSON.stringify(policy, null, 2)}\n`, { mode: 0o600 });
     fs.chmodSync(temporary, 0o600);
@@ -156,6 +162,6 @@ async function syncEndpointSecurityPolicy(config, source, timeoutMs = 3_000) {
         request.on("error", reject);
         request.end();
     });
-    writeEndpointSecurityPolicy(policy);
+    writeEndpointSecurityPolicy(policy, undefined, undefined, config.companyId);
     return policy;
 }

package/dist/utils.d.ts

@@ -14,6 +14,7 @@ export interface CodiedevConfig {
     }>;
     lastSynced: string;
     backendUrl: string;
+    agentSecurityEnabled?: boolean;
     deviceId?: string;
     deviceName?: string;
     captureIgnoredPaths?: string[];
@@ -96,7 +97,7 @@ export declare function openCodeInstalled(): boolean;
 /** Install a dormant global OpenCode adapter. Installing it unconditionally
  * keeps `codiedev connect` as the only setup step even when Codie/OpenCode is
  * installed later. OpenCode loads this file from its documented plugin dir. */
-export declare function installOpenCodeCapturePlugin(): void;
+export declare function installOpenCodeCapturePlugin(agentSecurityEnabled?: boolean): void;
 /**
  * VS Code with the GitHub Copilot Chat extension installed. The extension
  * directory pattern is `~/.vscode/extensions/github.copilot-chat-*`. We treat
@@ -104,11 +105,13 @@ export declare function installOpenCodeCapturePlugin(): void;
  */
 export declare function vscodeCopilotInstalled(): boolean;
 export declare function upsertCodiedevHook(hooks: Record<string, unknown>, eventName: string, subcommand: string, matcher?: string): void;
-export declare function installHook(): void;
+/** Remove Codiedev's entries for one event while preserving foreign hooks. */
+export declare function removeCodiedevHook(hooks: Record<string, unknown>, eventName: string): boolean;
+export declare function installHook(agentSecurityEnabled?: boolean): void;
 export declare function ensureDiscoveryHookInstalled(): void;
 export declare function ensureBackupHookInstalled(): void;
 export declare function ensureLimitHookInstalled(): void;
-export declare function ensureAllCodiedevHooksInstalled(): void;
+export declare function ensureAllCodiedevHooksInstalled(agentSecurityEnabled?: boolean): void;
 export declare function ensureSessionStartHookInstalled(): void;
 export declare function installClaudeCodeInstructions(): void;
 export declare function installCodexInstructions(): void;
@@ -166,7 +169,7 @@ export declare function cleanupCodexMcp(): void;
  * so we append a well-marked block if one isn't already present. Idempotent.
  */
 export declare function installCodexMcp(): boolean;
-export declare function installCodexHook(): void;
+export declare function installCodexHook(agentSecurityEnabled?: boolean): void;
 export declare function installCursorHook(): void;
 export interface ParsedStats {
     messageCount: number;

package/dist/utils.js

@@ -64,6 +64,7 @@ exports.openCodeInstalled = openCodeInstalled;
 exports.installOpenCodeCapturePlugin = installOpenCodeCapturePlugin;
 exports.vscodeCopilotInstalled = vscodeCopilotInstalled;
 exports.upsertCodiedevHook = upsertCodiedevHook;
+exports.removeCodiedevHook = removeCodiedevHook;
 exports.installHook = installHook;
 exports.ensureDiscoveryHookInstalled = ensureDiscoveryHookInstalled;
 exports.ensureBackupHookInstalled = ensureBackupHookInstalled;
@@ -1050,7 +1051,7 @@ function openCodeInstalled() {
 /** Install a dormant global OpenCode adapter. Installing it unconditionally
  * keeps `codiedev connect` as the only setup step even when Codie/OpenCode is
  * installed later. OpenCode loads this file from its documented plugin dir. */
-function installOpenCodeCapturePlugin() {
+function installOpenCodeCapturePlugin(agentSecurityEnabled = true) {
     const start = resolveHookInvocation("session-start-opencode");
     const capture = resolveHookInvocation("capture-opencode");
     const finish = resolveHookInvocation("capture-opencode-final");
@@ -1072,6 +1073,7 @@ function installOpenCodeCapturePlugin() {
         `const SECURITY_PRE = ${JSON.stringify(securityPre)};\n` +
         `const SECURITY_POST = ${JSON.stringify(securityPost)};\n` +
         `const SECURITY_FAILURE = ${JSON.stringify(securityFailure)};\n` +
+        `const AGENT_SECURITY_ENABLED = ${JSON.stringify(agentSecurityEnabled)};\n` +
         `const fingerprints = new Map();\n\n` +
         `const transcriptPaths = new Map();\n\n` +
         `function sessionId(event) {\n` +
@@ -1115,10 +1117,12 @@ function installOpenCodeCapturePlugin() {
         `    enforceSync(PROMPT, { sessionId: id, cwd, prompt });\n` +
         `  },\n` +
         `  "tool.execute.before": async (input, output) => {\n` +
+        `    if (!AGENT_SECURITY_ENABLED) return;\n` +
         `    const cwd = worktree || directory || process.cwd();\n` +
         `    enforceSync(SECURITY_PRE, { sessionId: input?.sessionID ?? input?.sessionId ?? "unknown", cwd, toolName: input?.tool ?? "unknown", toolUseId: input?.callID, toolInput: output?.args ?? output });\n` +
         `  },\n` +
         `  "tool.execute.after": async (input, output) => {\n` +
+        `    if (!AGENT_SECURITY_ENABLED) return;\n` +
         `    const cwd = worktree || directory || process.cwd();\n` +
         `    const payload = { sessionId: input?.sessionID ?? input?.sessionId ?? "unknown", cwd, toolName: input?.tool ?? "unknown", toolUseId: input?.callID, toolInput: input?.args, toolResponse: output };\n` +
         `    dispatch(output?.error ? SECURITY_FAILURE : SECURITY_POST, payload);\n` +
@@ -1217,7 +1221,36 @@ function upsertCodiedevHook(hooks, eventName, subcommand, matcher = ".*") {
     });
     hooks[eventName] = filtered;
 }
-function installHook() {
+/** Remove Codiedev's entries for one event while preserving foreign hooks. */
+function removeCodiedevHook(hooks, eventName) {
+    const entries = hooks[eventName];
+    if (!Array.isArray(entries))
+        return false;
+    let changed = false;
+    const filtered = entries.flatMap((entry) => {
+        const record = entry;
+        const inner = record.hooks;
+        if (!Array.isArray(inner))
+            return [record];
+        const remaining = inner.filter((hook) => {
+            const remove = (0, detection_1.isCodiedevHookCommand)(hook.command);
+            if (remove)
+                changed = true;
+            return !remove;
+        });
+        if (remaining.length === 0)
+            return [];
+        return [{ ...record, hooks: remaining }];
+    });
+    if (!changed)
+        return false;
+    if (filtered.length === 0)
+        delete hooks[eventName];
+    else
+        hooks[eventName] = filtered;
+    return true;
+}
+function installHook(agentSecurityEnabled = true) {
     let settings = {};
     try {
         if (fs.existsSync(CLAUDE_SETTINGS_PATH)) {
@@ -1236,9 +1269,16 @@ function installHook() {
     upsertCodiedevHook(hooks, "SessionEnd", "capture");
     // Tool boundaries → ADR shadow detection. PreToolUse is the eventual
     // enforcement point; alert mode always returns allow.
-    upsertCodiedevHook(hooks, "PreToolUse", "security-pre");
-    upsertCodiedevHook(hooks, "PostToolUse", "security-post");
-    upsertCodiedevHook(hooks, "PostToolUseFailure", "security-failure");
+    if (agentSecurityEnabled) {
+        upsertCodiedevHook(hooks, "PreToolUse", "security-pre");
+        upsertCodiedevHook(hooks, "PostToolUse", "security-post");
+        upsertCodiedevHook(hooks, "PostToolUseFailure", "security-failure");
+    }
+    else {
+        removeCodiedevHook(hooks, "PreToolUse");
+        removeCodiedevHook(hooks, "PostToolUse");
+        removeCodiedevHook(hooks, "PostToolUseFailure");
+    }
     // UserPromptSubmit → discover (surface a matching team skill for the task).
     upsertCodiedevHook(hooks, "UserPromptSubmit", "discover");
     // Stop → backup (auto-back-up changed artifact files to your private library).
@@ -1340,7 +1380,7 @@ function ensureLimitHookInstalled() {
 //      shrinks that window and removes the intra-process version entirely.
 // The per-hook ensure* functions below are kept for tests/back-compat but are
 // no longer called from the hook entrypoint.
-function ensureAllCodiedevHooksInstalled() {
+function ensureAllCodiedevHooksInstalled(agentSecurityEnabled = readConfig()?.agentSecurityEnabled === true) {
     try {
         if (!fs.existsSync(CLAUDE_SETTINGS_PATH))
             return; // not a Claude Code user
@@ -1348,16 +1388,22 @@ function ensureAllCodiedevHooksInstalled() {
         const hooks = (settings.hooks ?? {});
         const wanted = [
             ["SessionEnd", "capture"],
-            ["PreToolUse", "security-pre"],
-            ["PostToolUse", "security-post"],
-            ["PostToolUseFailure", "security-failure"],
             ["UserPromptSubmit", "discover"],
             ["Stop", "backup"],
             ["StopFailure", "limit", "rate_limit"],
             ["SessionStart", "session-start"],
         ];
+        if (agentSecurityEnabled) {
+            wanted.splice(1, 0, ["PreToolUse", "security-pre"], ["PostToolUse", "security-post"], ["PostToolUseFailure", "security-failure"]);
+        }
+        let changed = false;
+        if (!agentSecurityEnabled) {
+            for (const eventName of ["PreToolUse", "PostToolUse", "PostToolUseFailure"]) {
+                changed = removeCodiedevHook(hooks, eventName) || changed;
+            }
+        }
         const missing = wanted.filter(([eventName]) => !hasCodiedevHook(hooks, eventName));
-        if (missing.length === 0)
+        if (missing.length === 0 && !changed)
             return; // steady state: no write, no churn
         settings.hooks = hooks;
         for (const [eventName, subcommand, matcher] of missing) {
@@ -1798,7 +1844,7 @@ function installCodexMcp() {
 // Codex doesn't have a SessionEnd event yet — Stop fires after every turn.
 // The backend dedupes on (companyId, sessionId) and replaces the stored
 // transcript on re-upload, so the latest turn's snapshot wins.
-function installCodexHook() {
+function installCodexHook(agentSecurityEnabled = true) {
     let hooksFile = {};
     try {
         if (fs.existsSync(CODEX_HOOKS_PATH)) {
@@ -1845,9 +1891,16 @@ function installCodexHook() {
     // Codex uses the same Claude-style matcher-group shape. Keep these as
     // separate entries because Codex hook coverage is still evolving and a
     // malformed/unavailable post hook must not interfere with PreToolUse.
-    upsertCodiedevHook(hooks, "PreToolUse", "security-pre-codex");
-    upsertCodiedevHook(hooks, "PostToolUse", "security-post-codex");
-    upsertCodiedevHook(hooks, "PostToolUseFailure", "security-failure-codex");
+    if (agentSecurityEnabled) {
+        upsertCodiedevHook(hooks, "PreToolUse", "security-pre-codex");
+        upsertCodiedevHook(hooks, "PostToolUse", "security-post-codex");
+        upsertCodiedevHook(hooks, "PostToolUseFailure", "security-failure-codex");
+    }
+    else {
+        removeCodiedevHook(hooks, "PreToolUse");
+        removeCodiedevHook(hooks, "PostToolUse");
+        removeCodiedevHook(hooks, "PostToolUseFailure");
+    }
     // Prompt guard + skill discovery. The guard runs locally before any prompt
     // content can reach either the model or Codiedev's discovery endpoint.
     upsertCodiedevHook(hooks, "UserPromptSubmit", "discover-codex");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codiedev",
-  "version": "0.9.36",
+  "version": "0.9.38",
   "description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness",
   "bin": {
     "codiedev": "dist/cli.js",