codiedev 0.9.40 → 0.9.41

package/dist/codie.js

@@ -232,9 +232,26 @@ async function main() {
         OPENCODE_CONFIG_CONTENT: JSON.stringify(config),
     };
     const runtimeArgs = (0, codieLauncher_1.withCodieWorkingDirectory)(parsed.args, process.cwd());
-    const result = (0, child_process_1.spawnSync)(runtime, runtimeArgs, { stdio: "inherit", env });
+    const nonInteractiveRun = runtimeArgs[0] === "run";
+    if (nonInteractiveRun)
+        env.CODIEDEV_SECURITY_BLOCK_OUTPUT = "marker";
+    const result = (0, child_process_1.spawnSync)(runtime, runtimeArgs, {
+        stdio: nonInteractiveRun ? ["inherit", "inherit", "pipe"] : "inherit",
+        encoding: nonInteractiveRun ? "utf8" : undefined,
+        env,
+    });
     if (result.error)
         throw result.error;
+    if (nonInteractiveRun) {
+        const stderr = typeof result.stderr === "string" ? result.stderr : result.stderr?.toString() ?? "";
+        const blockReason = (0, codieLauncher_1.extractCodieSecurityBlock)(stderr);
+        if (blockReason) {
+            console.error(`Codie Security blocked this action:\n${blockReason}`);
+        }
+        else if (stderr) {
+            process.stderr.write(stderr);
+        }
+    }
     process.exitCode = result.status === null ? 1 : result.status;
 }
 main().catch((error) => {

package/dist/codieLauncher.d.ts

@@ -2,6 +2,11 @@ export interface CatalogModel {
     id: string;
     name?: string;
 }
+export declare const CODIE_SECURITY_BLOCK_MARKER = "__CODIEDEV_SECURITY_BLOCK__";
+/** Extract the private adapter marker used to carry a local block reason
+ * across OpenCode's generic 500 boundary. The marker never contains prompt or
+ * tool input — only the deterministic policy reason. */
+export declare function extractCodieSecurityBlock(stderr: string): string | undefined;
 /**
  * Pin non-interactive runs to the directory where `codie` was launched.
  * OpenCode can reuse a previously-known project instance; without an explicit

package/dist/codieLauncher.js

@@ -42,7 +42,8 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HIDDEN_WORDMARK = exports.CODIEDEV_WORDMARK = exports.LEGACY_CODIEDEV_WORDMARK = exports.STOCK_WORDMARK = exports.BRAND_PLUGIN_SPEC = void 0;
+exports.HIDDEN_WORDMARK = exports.CODIEDEV_WORDMARK = exports.LEGACY_CODIEDEV_WORDMARK = exports.STOCK_WORDMARK = exports.BRAND_PLUGIN_SPEC = exports.CODIE_SECURITY_BLOCK_MARKER = void 0;
+exports.extractCodieSecurityBlock = extractCodieSecurityBlock;
 exports.withCodieWorkingDirectory = withCodieWorkingDirectory;
 exports.bareModel = bareModel;
 exports.buildCodieConfig = buildCodieConfig;
@@ -62,6 +63,26 @@ const DEFAULT_NAMES = {
     "z-ai/glm-5.2": "GLM 5.2 · Fireworks ZDR",
     "moonshotai/kimi-k2.7-code": "Kimi K2.7 Code · Fireworks ZDR",
 };
+exports.CODIE_SECURITY_BLOCK_MARKER = "__CODIEDEV_SECURITY_BLOCK__";
+/** Extract the private adapter marker used to carry a local block reason
+ * across OpenCode's generic 500 boundary. The marker never contains prompt or
+ * tool input — only the deterministic policy reason. */
+function extractCodieSecurityBlock(stderr) {
+    for (const line of stderr.split(/\r?\n/)) {
+        const markerIndex = line.indexOf(exports.CODIE_SECURITY_BLOCK_MARKER);
+        if (markerIndex < 0)
+            continue;
+        try {
+            const parsed = JSON.parse(line.slice(markerIndex + exports.CODIE_SECURITY_BLOCK_MARKER.length));
+            if (typeof parsed?.reason === "string" && parsed.reason.trim())
+                return parsed.reason.trim();
+        }
+        catch {
+            // Ignore malformed or foreign stderr and preserve the original runtime error.
+        }
+    }
+    return undefined;
+}
 /**
  * Pin non-interactive runs to the directory where `codie` was launched.
  * OpenCode can reuse a previously-known project instance; without an explicit

package/dist/utils.js

@@ -1093,17 +1093,28 @@ function installOpenCodeCapturePlugin(agentSecurityEnabled = true) {
         `}\n\n` +
         `function enforceSync(invocation, payload) {\n` +
         `  const result = spawnSync(invocation.command, invocation.args, { input: JSON.stringify(payload), encoding: "utf8", stdio: ["pipe", "pipe", "ignore"], timeout: 1500 });\n` +
-        `  if (result.error) return;\n` +
+        `  if (result.error) return null;\n` +
         `  try {\n` +
         `    const decision = JSON.parse(result.stdout || "{}");\n` +
         `    const denied = decision?.decision === "block" || decision?.hookSpecificOutput?.permissionDecision === "deny";\n` +
-        `    if (denied) throw new Error(decision?.reason || decision?.hookSpecificOutput?.permissionDecisionReason || "Codie security policy blocked this action");\n` +
+        `    return denied ? (decision?.reason || decision?.hookSpecificOutput?.permissionDecisionReason || "Codie security policy blocked this action") : null;\n` +
         `  } catch (error) {\n` +
-        `    if (error instanceof SyntaxError) return;\n` +
-        `    throw error;\n` +
+        `    if (error instanceof SyntaxError) return null;\n` +
+        `    return null;\n` +
         `  }\n` +
         `}\n\n` +
         `export const CodiedevCapture = async ({ client, directory, worktree }) => {\n` +
+        `  const enforce = async (invocation, payload) => {\n` +
+        `    const reason = enforceSync(invocation, payload);\n` +
+        `    if (!reason) return;\n` +
+        `    try { await client.tui.showToast({ title: "Codie Security", message: reason, variant: "error", duration: 10000 }); } catch {}\n` +
+        `    if (process.env.CODIEDEV_SECURITY_BLOCK_OUTPUT === "marker") {\n` +
+        `      process.stderr.write("__CODIEDEV_SECURITY_BLOCK__" + JSON.stringify({ reason }) + "\\n");\n` +
+        `    } else {\n` +
+        `      process.stderr.write("\\nCodie Security blocked this action:\\n" + reason + "\\n");\n` +
+        `    }\n` +
+        `    throw new Error(reason);\n` +
+        `  };\n` +
         `  const resolveCwd = async (id, hint) => {\n` +
         `    if (typeof hint === "string" && hint && hint !== "/") { sessionDirectories.set(id, hint); return hint; }\n` +
         `    const remembered = sessionDirectories.get(id);\n` +
@@ -1129,13 +1140,13 @@ function installOpenCodeCapturePlugin(agentSecurityEnabled = true) {
         `    const id = input?.sessionID ?? input?.sessionId ?? "unknown";\n` +
         `    const cwd = await resolveCwd(id);\n` +
         `    const prompt = Array.isArray(output?.parts) ? output.parts.filter((part) => part?.type === "text").map((part) => part.text || "").join("\\n") : "";\n` +
-        `    enforceSync(PROMPT, { sessionId: id, cwd, prompt });\n` +
+        `    await enforce(PROMPT, { sessionId: id, cwd, prompt });\n` +
         `  },\n` +
         `  "tool.execute.before": async (input, output) => {\n` +
         `    if (!AGENT_SECURITY_ENABLED) return;\n` +
         `    const id = input?.sessionID ?? input?.sessionId ?? "unknown";\n` +
         `    const cwd = await resolveCwd(id);\n` +
-        `    enforceSync(SECURITY_PRE, { sessionId: id, cwd, toolName: input?.tool ?? "unknown", toolUseId: input?.callID, toolInput: output?.args ?? output });\n` +
+        `    await enforce(SECURITY_PRE, { sessionId: id, cwd, toolName: input?.tool ?? "unknown", toolUseId: input?.callID, toolInput: output?.args ?? output });\n` +
         `  },\n` +
         `  "tool.execute.after": async (input, output) => {\n` +
         `    if (!AGENT_SECURITY_ENABLED) return;\n` +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codiedev",
-  "version": "0.9.40",
+  "version": "0.9.41",
   "description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness",
   "bin": {
     "codiedev": "dist/cli.js",