codiedev 0.9.50 → 0.9.52

package/dist/hook.js

@@ -42,14 +42,9 @@ const https = __importStar(require("https"));
 const http = __importStar(require("http"));
 const child_process_1 = require("child_process");
 const utils_1 = require("./utils");
-const limitEvent_1 = require("./limitEvent");
+const limitEventReporter_1 = require("./limitEventReporter");
 const version_1 = require("./version");
 const captureLog_1 = require("./captureLog");
-const security_1 = require("./security");
-const securitySession_1 = require("./securitySession");
-const securityPolicy_1 = require("./securityPolicy");
-const securityFeature_1 = require("./securityFeature");
-const securityInventory_1 = require("./securityInventory");
 const captureExclusions_1 = require("./captureExclusions");
 // Pure builder for the discovery additionalContext. Returns null when there are
 // no matches. The suggested `codiedev pull` command carries the EXACT top key
@@ -98,43 +93,56 @@ async function runDiscover(prompt) {
     }
     process.exit(0);
 }
+function readTranscriptTailFile(transcriptPath, maxBytes = 512 * 1024) {
+    const size = fs.statSync(transcriptPath).size;
+    if (size <= maxBytes)
+        return fs.readFileSync(transcriptPath, "utf8");
+    const handle = fs.openSync(transcriptPath, "r");
+    try {
+        const buffer = Buffer.allocUnsafe(maxBytes);
+        const bytesRead = fs.readSync(handle, buffer, 0, maxBytes, size - maxBytes);
+        return buffer.subarray(0, bytesRead).toString("utf8");
+    }
+    finally {
+        fs.closeSync(handle);
+    }
+}
 // StopFailure (matcher rate_limit): the dev just got blocked. Read the local
 // transcript tail for the ground-truth rate_limit line and POST a tiny event.
 // Best-effort + silent — StopFailure output is ignored by Claude Code anyway.
-async function runStopFailure(hookInput) {
+async function readAndPostLimitEvent(hookInput, source, emitMinimalOnMiss) {
     const config = (0, utils_1.readConfig)();
     if (!config)
         process.exit(0);
-    let event = null;
-    let transcriptTail;
+    let transcript = "";
     const tp = hookInput.transcript_path;
     if (tp) {
         try {
-            const transcript = fs.readFileSync(tp, "utf8");
-            event = (0, limitEvent_1.parseLimitEventFromTranscript)(transcript);
-            // Ship the tail with the event so the server can summarize "what they
-            // were working on" right now — no waiting for the SessionEnd capture.
-            transcriptTail = (0, limitEvent_1.tailForLimitEvent)(transcript) || undefined;
+            transcript = readTranscriptTailFile(tp);
         }
         catch {
             /* unreadable transcript — fall through to minimal event */
         }
     }
-    // The hook is registered with matcher "rate_limit", so a miss still means a
-    // real limit — emit a minimal event rather than dropping it.
-    const payload = event ?? { kind: "other", at: Date.now(), resetText: null };
     try {
-        await postJson(`${config.backendUrl}/api/cli/limitEvent`, {
-            kind: payload.kind,
-            at: payload.at,
-            resetText: payload.resetText,
+        await (0, limitEventReporter_1.reportTranscriptLimitEvent)({
+            config,
+            source,
             sessionId: hookInput.session_id,
-            transcriptTail,
-        }, config.token);
+            transcript,
+            emitMinimalOnMiss,
+        });
     }
     catch {
         /* best-effort */
     }
+}
+async function runStopFailure(hookInput) {
+    await readAndPostLimitEvent(hookInput, "claude-code", true);
+    process.exit(0);
+}
+async function runCodexLimit(hookInput) {
+    await readAndPostLimitEvent(hookInput, "codex", false);
     process.exit(0);
 }
 // Skip-reason ping: this session is ending WITHOUT a capture, and here's why.
@@ -223,7 +231,7 @@ timeoutMs) {
 // postJson variant that returns the parsed response body — the upload-URL
 // handshake needs the { uploadUrl } the server hands back. No timeout: runs
 // only in detached uploader children, never on the shutdown clock.
-function postJsonForResponse(url, body, bearerToken, timeoutMs) {
+function postJsonForResponse(url, body, bearerToken) {
     return new Promise((resolve, reject) => {
         const parsed = new URL(url);
         const data = JSON.stringify(body);
@@ -257,139 +265,10 @@ function postJsonForResponse(url, body, bearerToken, timeoutMs) {
             });
         });
         req.on("error", reject);
-        if (timeoutMs) {
-            req.setTimeout(timeoutMs, () => {
-                req.destroy(new Error(`timeout after ${timeoutMs}ms`));
-            });
-        }
         req.write(data);
         req.end();
     });
 }
-// Local policy runs synchronously before a tool executes. Workflow telemetry
-// is dispatched separately and fail-open, so a detector outage or timeout can
-// never delay or override the deterministic endpoint decision.
-async function runSecurityHook(hookInput, phase, source, uploadTelemetry = true) {
-    const config = (0, utils_1.readConfig)();
-    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
-        return;
-    const policy = (0, securityPolicy_1.readEndpointSecurityPolicy)(undefined, undefined, config.companyId);
-    const sessionId = hookInput.session_id ?? hookInput.sessionId;
-    const sessionSignal = phase === "pre" ? (0, securitySession_1.readSessionSecuritySignal)(sessionId) : undefined;
-    const localDecision = (0, security_1.evaluateToolSecurity)(hookInput, phase, policy, source, sessionSignal);
-    if (phase === "post" && (0, security_1.securityInputHasSensitivePath)(hookInput)) {
-        (0, securitySession_1.recordSensitiveReadSignal)(sessionId);
-    }
-    const event = (0, security_1.buildSecurityWorkflowEvent)(hookInput, phase, source);
-    if (event) {
-        event.localDecision = localDecision.action;
-        event.localCategory = localDecision.category;
-    }
-    if (localDecision.action === "block" && phase === "pre") {
-        (0, captureLog_1.appendCaptureLog)({
-            stage: "security",
-            sessionId: hookInput.session_id ?? hookInput.sessionId ?? "unknown",
-            outcome: "ok",
-            detail: `phase=${phase} localDecision=block category=${localDecision.category}`,
-        });
-        if (uploadTelemetry)
-            dispatchSecurityEventUpload(event);
-        process.stdout.write(JSON.stringify({
-            hookSpecificOutput: {
-                hookEventName: "PreToolUse",
-                permissionDecision: "deny",
-                permissionDecisionReason: localDecision.reason,
-            },
-        }));
-        return;
-    }
-    if (!event)
-        return;
-    if (uploadTelemetry)
-        dispatchSecurityEventUpload(event);
-}
-function runPromptSecurityHook(hookInput, source, uploadTelemetry = true) {
-    const config = (0, utils_1.readConfig)();
-    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
-        return false;
-    const decision = (0, security_1.evaluatePromptSecurity)(hookInput.prompt, (0, securityPolicy_1.readEndpointSecurityPolicy)(undefined, undefined, config.companyId), source);
-    if (decision.action !== "block")
-        return false;
-    (0, captureLog_1.appendCaptureLog)({
-        stage: "security",
-        sessionId: hookInput.session_id ?? hookInput.sessionId ?? "unknown",
-        outcome: "ok",
-        detail: `phase=prompt localDecision=block category=${decision.category} telemetry=${uploadTelemetry ? "enabled" : "suppressed"} cwd=${hookInput.cwd ?? "unknown"}`,
-    });
-    if (uploadTelemetry) {
-        dispatchSecurityEventUpload((0, security_1.buildBlockedSecurityPromptEvent)(hookInput, source, decision.category ?? "secret_in_prompt"));
-    }
-    process.stdout.write(JSON.stringify({
-        decision: "block",
-        reason: decision.reason,
-    }));
-    return true;
-}
-function dispatchAllowedPromptSecurityEvent(hookInput, source) {
-    const config = (0, utils_1.readConfig)();
-    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
-        return;
-    const event = (0, security_1.buildSecurityPromptEvent)(hookInput, source, Date.now, (0, securityPolicy_1.readEndpointSecurityPolicy)(undefined, undefined, config.companyId));
-    if (event)
-        dispatchSecurityEventUpload(event);
-}
-function dispatchSecurityEventUpload(event) {
-    if (!event || !(0, securityFeature_1.isAgentSecurityEnabled)((0, utils_1.readConfig)()))
-        return;
-    try {
-        const child = (0, child_process_1.spawn)(process.execPath, [process.argv[1], "security-upload"], {
-            detached: true,
-            stdio: ["pipe", "ignore", "ignore"],
-        });
-        child.stdin?.end(JSON.stringify(event));
-        child.unref();
-    }
-    catch {
-        // Telemetry is best-effort and must never delay local enforcement.
-    }
-}
-async function runSecurityEventUpload() {
-    const config = (0, utils_1.readConfig)();
-    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
-        return;
-    const startedAt = Date.now();
-    try {
-        const raw = await readStdin();
-        const event = JSON.parse(raw);
-        const eventWithEndpoint = (0, security_1.withEndpointIdentity)(event, {
-            endpointId: config.deviceId,
-            endpointName: config.deviceName,
-            cliVersion: version_1.CLI_VERSION,
-        });
-        const result = await postJsonForResponse(`${config.backendUrl}/api/cli/securityEvent`, { ...eventWithEndpoint }, config.token, 
-        // Leave room for a cold backend and durable scheduling. This uploader is
-        // detached, so the network budget never delays the developer's prompt or
-        // tool call. Policy refreshes use the separately signed sync endpoint.
-        5_000);
-        if (result?.policy?.schemaVersion === 1) {
-            (0, securityPolicy_1.writeEndpointSecurityPolicy)(result.policy, undefined, undefined, config.companyId);
-        }
-        (0, captureLog_1.appendCaptureLog)({
-            stage: "security",
-            sessionId: event.sessionId,
-            outcome: "ok",
-            detail: `phase=${event.phase} elapsedMs=${Date.now() - startedAt} verdict=${String(result?.verdict ?? "unknown")}`,
-        });
-    }
-    catch (err) {
-        (0, captureLog_1.appendCaptureLog)({
-            stage: "security",
-            sessionId: "upload",
-            outcome: "ERROR",
-            detail: `elapsedMs=${Date.now() - startedAt} ${err.message}`,
-        });
-    }
-}
 // Raw-bytes POST to a Convex storage upload URL (no auth header — the URL
 // itself is the one-time credential). Returns the parsed { storageId }.
 function postBytes(url, bytes, contentType) {
@@ -513,20 +392,6 @@ async function main() {
         }
         process.exit(0);
     }
-    // Daily component drift scan runs in a detached hook process. The parent
-    // SessionStart path only performs a timestamp read, so agent startup never
-    // waits for filesystem traversal or an inventory upload.
-    if (process.argv[2] === "security-inventory-upload") {
-        const config = (0, utils_1.readConfig)();
-        if (config && (0, securityFeature_1.isAgentSecurityEnabled)(config)) {
-            const inventory = (0, securityInventory_1.buildSecurityInventory)({ workspace: process.argv[3] || process.cwd() });
-            try {
-                await (0, securityInventory_1.uploadSecurityInventory)(inventory, config);
-            }
-            catch { /* retry after the daily inventory window */ }
-        }
-        process.exit(0);
-    }
     // Detached backup uploader child (spawned by runBackup below). The job file
     // carries only { root, files }; the child re-reads config from disk. No stdin
     // needed, so handle it before readStdin() like the capture uploader above.
@@ -563,13 +428,6 @@ async function main() {
         }
         process.exit(0);
     }
-    // Detached, best-effort security telemetry. Local policy decisions have
-    // already completed in the parent hook; this child can never delay or alter
-    // the developer's action.
-    if (process.argv[2] === "security-upload") {
-        await runSecurityEventUpload();
-        process.exit(0);
-    }
     let hookInput = {};
     try {
         const raw = await readStdin();
@@ -580,60 +438,29 @@ async function main() {
     catch {
         process.exit(0);
     }
-    // Privacy exclusions suppress every Codiedev upload, but they must never
-    // disable local security enforcement. Security hooks run first with telemetry
-    // disabled; all other hook modes still exit before making a network request.
-    const captureIgnored = (0, captureExclusions_1.shouldIgnoreCaptureInput)((0, utils_1.readConfig)(), hookInput);
-    const securityCommand = process.argv[2] ?? "";
-    const securityMatch = securityCommand.match(/^security-(pre|post|failure)(?:-(codex|codie))?$/);
-    if (securityMatch) {
-        const source = securityMatch[2] === "codex"
-            ? "codex"
-            : securityMatch[2] === "codie"
-                ? "codie-harness"
-                : "claude-code";
-        await runSecurityHook(hookInput, securityMatch[1], source, !captureIgnored);
+    // Local privacy boundary: every stdin-driven hook mode passes through this
+    // check BEFORE prompt discovery, limit-event tails, SessionStart pings,
+    // backup, self-heal, transcript reads, or detached dispatch. Ignored means
+    // no Codiedev request at all for this session.
+    if ((0, captureExclusions_1.shouldIgnoreCaptureInput)((0, utils_1.readConfig)(), hookInput)) {
         process.exit(0);
     }
     // UserPromptSubmit discovery path — separate from session capture.
-    const promptCommand = process.argv[2] ?? "";
-    if (process.argv[2] === "discover" ||
-        process.argv[2] === "discover-codex" ||
-        process.argv[2] === "discover-codie") {
-        const source = promptCommand === "discover-codex"
-            ? "codex"
-            : promptCommand === "discover-codie"
-                ? "codie-harness"
-                : "claude-code";
-        // Security runs first and locally. A blocked prompt is erased before it
-        // reaches the model, so discovery must not send it to the backend.
-        if (runPromptSecurityHook(hookInput, source, !captureIgnored))
-            return;
-        if (captureIgnored)
-            return;
-        dispatchAllowedPromptSecurityEvent(hookInput, source);
+    if (process.argv[2] === "discover") {
         await runDiscover(hookInput.prompt);
         return;
     }
-    if (captureIgnored)
-        process.exit(0);
     // StopFailure (matcher rate_limit): post the rate-limit event.
     if (process.argv[2] === "limit") {
         await runStopFailure(hookInput);
         return;
     }
+    if (process.argv[2] === "limit-codex") {
+        await runCodexLimit(hookInput);
+        return;
+    }
     // SessionStart: post the capture-coverage denominator ping. Tiny + fast.
     if (process.argv[2] === "session-start" || process.argv[2] === "session-start-opencode") {
-        if ((0, securityFeature_1.isAgentSecurityEnabled)((0, utils_1.readConfig)()) && (0, securityInventory_1.securityInventoryDue)()) {
-            try {
-                const child = (0, child_process_1.spawn)(process.execPath, [process.argv[1], "security-inventory-upload", hookInput.cwd || process.cwd()], {
-                    detached: true,
-                    stdio: "ignore",
-                });
-                child.unref();
-            }
-            catch { /* daily inventory is best-effort */ }
-        }
         await runSessionStart(hookInput, process.argv[2] === "session-start-opencode" ? "opencode" : "claude-code");
         return;
     }
@@ -643,6 +470,8 @@ async function main() {
     // pinging (the Sonifi "starts arrive, captures never" loss) — re-wired on
     // their next Stop/SessionEnd. One read + one write, only when missing.
     (0, utils_1.ensureAllCodiedevHooksInstalled)();
+    if (process.argv[2] === "capture-codex")
+        (0, utils_1.ensureCodexLimitHookInstalled)();
     const { session_id, transcript_path, cwd, workspace_roots } = hookInput;
     const workspaceRoot = workspace_roots && workspace_roots.length > 0
         ? workspace_roots[0]

package/dist/limitEvent.d.ts

@@ -1,9 +1,12 @@
-export type LimitKind = "session" | "org_spend" | "other";
+export type LimitKind = "session" | "user_spend" | "org_spend" | "other";
 export interface LimitEvent {
     kind: LimitKind;
     at: number;
     resetText: string | null;
+    reason?: string;
 }
 export declare function classifyLimitKind(text: string): LimitKind;
 export declare function parseLimitEventFromTranscript(transcript: string): LimitEvent | null;
+/** Parse the structured rate-limit snapshot written to Codex rollout JSONL. */
+export declare function parseCodexLimitEventFromTranscript(transcript: string): LimitEvent | null;
 export declare function tailForLimitEvent(transcript: string, maxChars?: number): string;

package/dist/limitEvent.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.classifyLimitKind = classifyLimitKind;
 exports.parseLimitEventFromTranscript = parseLimitEventFromTranscript;
+exports.parseCodexLimitEventFromTranscript = parseCodexLimitEventFromTranscript;
 exports.tailForLimitEvent = tailForLimitEvent;
 function classifyLimitKind(text) {
     const t = text.toLowerCase();
@@ -50,6 +51,59 @@ function parseLimitEventFromTranscript(transcript) {
     }
     return found;
 }
+function codexLimitKind(reason, spendControlReached) {
+    if (spendControlReached || reason.startsWith("workspace_owner_"))
+        return "org_spend";
+    if (reason.startsWith("workspace_member_"))
+        return "user_spend";
+    return reason === "rate_limit_reached" ? "session" : "other";
+}
+function codexResetText(rateLimits) {
+    const windows = [rateLimits?.primary, rateLimits?.secondary]
+        .filter((window) => window && typeof window === "object");
+    const reached = windows.filter((window) => Number(window.used_percent) >= 100);
+    const candidates = reached.length > 0 ? reached : windows;
+    const resetAt = candidates
+        .map((window) => Number(window.resets_at))
+        .filter((value) => Number.isFinite(value) && value > 0)
+        .sort((a, b) => a - b)[0];
+    return resetAt ? new Date(resetAt * 1000).toISOString() : null;
+}
+/** Parse the structured rate-limit snapshot written to Codex rollout JSONL. */
+function parseCodexLimitEventFromTranscript(transcript) {
+    let found = null;
+    for (const line of transcript.split("\n")) {
+        if (!line.includes('"rate_limit_reached_type"') && !line.includes('"spend_control_reached"'))
+            continue;
+        let entry;
+        try {
+            entry = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        if (entry?.type !== "event_msg" || entry?.payload?.type !== "token_count")
+            continue;
+        const rateLimits = entry.payload.rate_limits;
+        if (!rateLimits || typeof rateLimits !== "object")
+            continue;
+        const reachedType = typeof rateLimits.rate_limit_reached_type === "string"
+            ? rateLimits.rate_limit_reached_type
+            : null;
+        const spendControlReached = rateLimits.spend_control_reached === true;
+        if (!reachedType && !spendControlReached)
+            continue;
+        const reason = reachedType ?? "spend_control_reached";
+        const at = typeof entry.timestamp === "string" ? Date.parse(entry.timestamp) : NaN;
+        found = {
+            kind: codexLimitKind(reason, spendControlReached),
+            at: Number.isNaN(at) ? Date.now() : at,
+            resetText: codexResetText(rateLimits),
+            reason,
+        };
+    }
+    return found;
+}
 // Tail of the raw transcript to ship with the limit event so the server can
 // summarize "what they were working on" immediately — without waiting for the
 // SessionEnd capture (which can lag hours, or drop entirely on Windows).

package/dist/limitEventReporter.d.ts

@@ -0,0 +1,21 @@
+import { type LimitEvent } from "./limitEvent";
+export type LimitEventSource = "claude-code" | "codex";
+export type LimitEventPayload = LimitEvent & {
+    source: LimitEventSource;
+    sessionId?: string;
+    transcriptTail?: string;
+};
+export declare function postLimitEvent(config: {
+    backendUrl: string;
+    token: string;
+}, payload: LimitEventPayload, timeoutMs?: number): Promise<void>;
+export declare function reportTranscriptLimitEvent(args: {
+    config: {
+        backendUrl: string;
+        token: string;
+    };
+    source: LimitEventSource;
+    sessionId?: string;
+    transcript: string;
+    emitMinimalOnMiss?: boolean;
+}): Promise<boolean>;

package/dist/limitEventReporter.js

@@ -0,0 +1,91 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.postLimitEvent = postLimitEvent;
+exports.reportTranscriptLimitEvent = reportTranscriptLimitEvent;
+const http = __importStar(require("node:http"));
+const https = __importStar(require("node:https"));
+const version_1 = require("./version");
+const limitEvent_1 = require("./limitEvent");
+function postLimitEvent(config, payload, timeoutMs = 5_000) {
+    return new Promise((resolve, reject) => {
+        const target = new URL("/api/cli/limitEvent", config.backendUrl);
+        const data = JSON.stringify(payload);
+        const transport = target.protocol === "https:" ? https : http;
+        const request = transport.request({
+            hostname: target.hostname,
+            port: target.port || (target.protocol === "https:" ? 443 : 80),
+            path: target.pathname + target.search,
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "Content-Length": Buffer.byteLength(data),
+                Authorization: `Bearer ${config.token}`,
+                "X-Codiedev-Cli-Version": version_1.CLI_VERSION,
+            },
+        }, (response) => {
+            let responseBody = "";
+            response.on("data", (chunk) => { responseBody += chunk; });
+            response.on("end", () => {
+                if (response.statusCode && response.statusCode >= 200 && response.statusCode < 300) {
+                    resolve();
+                }
+                else {
+                    reject(new Error(`HTTP ${response.statusCode}: ${responseBody}`));
+                }
+            });
+        });
+        request.on("error", reject);
+        request.setTimeout(timeoutMs, () => request.destroy(new Error(`timeout after ${timeoutMs}ms`)));
+        request.write(data);
+        request.end();
+    });
+}
+async function reportTranscriptLimitEvent(args) {
+    const parse = args.source === "codex"
+        ? limitEvent_1.parseCodexLimitEventFromTranscript
+        : limitEvent_1.parseLimitEventFromTranscript;
+    const parsed = parse(args.transcript);
+    if (!parsed && !args.emitMinimalOnMiss)
+        return false;
+    const event = parsed ?? { kind: "other", at: Date.now(), resetText: null };
+    await postLimitEvent(args.config, {
+        source: args.source,
+        ...event,
+        sessionId: args.sessionId,
+        transcriptTail: args.transcript ? (0, limitEvent_1.tailForLimitEvent)(args.transcript) : undefined,
+    });
+    return true;
+}

package/dist/utils.d.ts

@@ -14,7 +14,6 @@ export interface CodiedevConfig {
     }>;
     lastSynced: string;
     backendUrl: string;
-    agentSecurityEnabled?: boolean;
     deviceId?: string;
     deviceName?: string;
     captureIgnoredPaths?: string[];
@@ -97,7 +96,7 @@ export declare function openCodeInstalled(): boolean;
 /** Install a dormant global OpenCode adapter. Installing it unconditionally
  * keeps `codiedev connect` as the only setup step even when Codie/OpenCode is
  * installed later. OpenCode loads this file from its documented plugin dir. */
-export declare function installOpenCodeCapturePlugin(agentSecurityEnabled?: boolean): void;
+export declare function installOpenCodeCapturePlugin(): void;
 /**
  * VS Code with the GitHub Copilot Chat extension installed. The extension
  * directory pattern is `~/.vscode/extensions/github.copilot-chat-*`. We treat
@@ -105,13 +104,11 @@ export declare function installOpenCodeCapturePlugin(agentSecurityEnabled?: bool
  */
 export declare function vscodeCopilotInstalled(): boolean;
 export declare function upsertCodiedevHook(hooks: Record<string, unknown>, eventName: string, subcommand: string, matcher?: string): void;
-/** Remove Codiedev's entries for one event while preserving foreign hooks. */
-export declare function removeCodiedevHook(hooks: Record<string, unknown>, eventName: string): boolean;
-export declare function installHook(agentSecurityEnabled?: boolean): void;
+export declare function installHook(): void;
 export declare function ensureDiscoveryHookInstalled(): void;
 export declare function ensureBackupHookInstalled(): void;
 export declare function ensureLimitHookInstalled(): void;
-export declare function ensureAllCodiedevHooksInstalled(agentSecurityEnabled?: boolean): void;
+export declare function ensureAllCodiedevHooksInstalled(): void;
 export declare function ensureSessionStartHookInstalled(): void;
 export declare function installClaudeCodeInstructions(): void;
 export declare function installCodexInstructions(): void;
@@ -169,7 +166,8 @@ export declare function cleanupCodexMcp(): void;
  * so we append a well-marked block if one isn't already present. Idempotent.
  */
 export declare function installCodexMcp(): boolean;
-export declare function installCodexHook(agentSecurityEnabled?: boolean): void;
+export declare function installCodexHook(): void;
+export declare function ensureCodexLimitHookInstalled(): void;
 export declare function installCursorHook(): void;
 export interface ParsedStats {
     messageCount: number;