codiedev 0.9.80 → 0.10.0-beta.10

package/dist/inboxFormat.js

@@ -2,32 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.formatInbox = formatInbox;
 const shared_1 = require("./commands/shared");
-/**
- * Render the inbox for BOTH surfaces — `codiedev inbox` and the MCP
- * `codiedev_inbox` tool an agent calls for "any messages?". Shared so the
- * agent path can never drift back to pings-only while the human path shows
- * mentions.
- */
 function formatInbox(opts) {
     const mentions = opts.mentions ?? [];
-    // The backend applies `limit` to each source independently, so asking for N
-    // can return up to 2N — and with no `--limit` it defaults to 50 per source,
-    // i.e. 100 rows, twice the pre-change maximum. Cap the COMBINED list by
-    // recency, always (matching the backend's own default), so the header is
-    // truthful and `--limit` actually holds.
-    //
-    // Selected by identity rather than by a `createdAt >= cutoff` filter: rows
-    // tied on the cutoff millisecond are reachable (Convex freezes Date.now()
-    // per transaction, and seeded activity carries synthetic stamps) and a
-    // threshold filter lets every tied row through, overshooting the limit.
     const DEFAULT_LIMIT = 50;
     const cap = opts.limit ?? DEFAULT_LIMIT;
-    // Pings claim the budget first, then mentions fill whatever is left — both
-    // newest-first. Before this change pings owned the whole budget, so this is
-    // purely additive and can never hide a ping that used to be visible. A flat
-    // recency cap would instead let a busy feed evict every direct ping, and
-    // pings are the actionable half: they carry the id you reply to, and losing
-    // them all takes the mark-read footer with them.
     const byRecency = (xs) => [...xs].sort((a, b) => b.createdAt - a.createdAt);
     const keptPings = byRecency(opts.pings).slice(0, cap);
     const keptMentions = byRecency(mentions).slice(0, Math.max(0, cap - keptPings.length));
@@ -50,8 +28,6 @@ function formatInbox(opts) {
         lines.push(`    id: ${p.pingId}`);
         lines.push("");
     }
-    // Mentions carry no CLI-side body to reply to — the thread lives in the feed
-    // — so each row ends in the deep link rather than an id.
     for (const m of keptMentions) {
         const dot = m.readAt ? "·" : "●";
         const from = m.from?.name ?? "someone";

package/dist/launchContext.js

@@ -8,38 +8,22 @@ exports.detectCursorLaunch = detectCursorLaunch;
 exports.detectCopilotLaunch = detectCopilotLaunch;
 exports.hookLaunch = hookLaunch;
 const node_child_process_1 = require("node:child_process");
-/**
- * How a harness that records nothing about its own launch was started.
- * Claude Code (`entrypoint`) and Codex (`session_meta.source`) stamp this in
- * the transcript; Cursor, Codie and the Copilot CLI do not, so the hook reads
- * it from the process that launched it. Raw, namespaced values; what counts as
- * "automated" is decided in reporting, not here.
- */
 const VALUE = /^[a-z0-9][a-z0-9_.:-]{0,39}$/;
-/** Codie (OpenCode) subcommands, read in-process by the capture plugin. */
 const CODIE_SUBCOMMANDS = ["run", "serve", "acp", "web", "attach"];
 function codieLaunchFromArgv(argv) {
     const sub = argv.find((a) => CODIE_SUBCOMMANDS.includes(a));
     return sub ? `codie:${sub}` : "codie:tui";
 }
-/**
- * Split a command line into tokens, honouring double quotes (Windows quotes
- * paths with spaces: "C:\\Program Files\\…\\node.exe" "…\\index.js" -p hi).
- */
 function tokenize(command) {
     const tokens = [];
     for (const m of command.matchAll(/"([^"]*)"|(\S+)/g))
         tokens.push(m[1] ?? m[2]);
     return tokens;
 }
-/** A path segment named cursor-agent / agent (Unix or Windows separators). */
 const CURSOR_AGENT_PATH = /(^|[/\\])cursor-agent([/\\]|\.(exe|cmd|ps1)$|$)/i;
 const AGENT_BIN = /(^|[/\\])(cursor-)?agent(\.(exe|cmd|ps1))?$/i;
-/** One launching process's command line → a Cursor launch value. */
 function cursorLaunchFromCommand(command) {
     const tokens = tokenize(command);
-    // The CLI runs as `<launcher> [node] …/cursor-agent/versions/<v>/index.js [flags] [prompt]`
-    // on macOS/Linux (~/.local/share/cursor-agent) and Windows (%LOCALAPPDATA%\cursor-agent).
     const isAgent = tokens.some((t) => CURSOR_AGENT_PATH.test(t) || /[/\\]\.local[/\\]share[/\\]cursor/i.test(t))
         && tokens.some((t) => AGENT_BIN.test(t) || /index\.js$/i.test(t));
     if (isAgent) {
@@ -51,14 +35,7 @@ function cursorLaunchFromCommand(command) {
         return "cursor:ide";
     return undefined;
 }
-/** Cursor flags that take a value; the token after them is not the prompt. */
 const CURSOR_VALUE_FLAGS = new Set(["--model", "-m", "--output-format", "--api-key", "--resume", "--workspace", "--mode", "-H", "--header"]);
-/**
- * The flags before the prompt. The prompt is on the command line too, so a
- * prompt mentioning "-p" must not read as headless: stop at the first token
- * that is neither a flag nor a flag's value. Starts after the launcher script
- * (`…/index.js`) when present, else after the agent binary.
- */
 function cursorFlags(tokens) {
     let start = tokens.findIndex((t) => /index\.js$/i.test(t));
     if (start < 0)
@@ -74,20 +51,10 @@ function cursorFlags(tokens) {
     }
     return flags;
 }
-/** The Copilot CLI binary or its npm launcher (`copilot`, `copilot.exe`, `copilot.cmd`). */
 const COPILOT_BIN = /(^|[/\\])copilot(\.(exe|cmd|ps1|js))?$/i;
 const NODE_BIN = /(^|[/\\])node(\.exe)?$/i;
-/**
- * One launching process's command line → a Copilot CLI launch value. The CLI
- * runs as `…/@github/copilot-<platform>/copilot [flags]` under
- * `node …/bin/copilot [flags]`; `-p`/`--prompt` is headless (scripted). VS
- * Code's agent (`copilot-runtime --headless`) is named by workspace.yaml
- * instead, so it never matches here.
- */
 function copilotLaunchFromCommand(command) {
     const tokens = tokenize(command);
-    // Only the program itself (or the script `node` runs): a shell command line
-    // that merely mentions "copilot" as a word is not the Copilot CLI.
     const bin = COPILOT_BIN.test(tokens[0] ?? "")
         ? 0
         : NODE_BIN.test(tokens[0] ?? "") && COPILOT_BIN.test(tokens[1] ?? "")
@@ -99,7 +66,6 @@ function copilotLaunchFromCommand(command) {
         const t = tokens[i];
         if (t === "-p" || t === "--prompt" || t.startsWith("--prompt="))
             return "copilot:print";
-        // The prompt itself can mention "-p": stop at the first non-flag token.
         if (!t.startsWith("-"))
             break;
         if (COPILOT_VALUE_FLAGS.has(t))
@@ -107,7 +73,6 @@ function copilotLaunchFromCommand(command) {
     }
     return "copilot:cli";
 }
-/** Copilot CLI flags that take a value; the token after them is not a flag. */
 const COPILOT_VALUE_FLAGS = new Set([
     "--model", "--add-dir", "--allow-tool", "--deny-tool", "--resume", "--log-dir",
     "--log-level", "--agent", "--config-dir", "--allow-url", "--deny-url",
@@ -119,11 +84,6 @@ const psPosix = (pid) => {
     const match = line.match(/^(\d+)\s+(.*)$/s);
     return match ? { ppid: Number(match[1]), command: match[2] } : null;
 };
-/**
- * Windows: one PowerShell call returns the whole ancestor chain (spawning
- * PowerShell per level would cost ~0.5s each). CommandLine needs CIM, which
- * every supported Windows has; any failure means "unknown", never a guess.
- */
 function windowsAncestors(startPid, depth) {
     const script = `$p=${Math.trunc(startPid)};$o=@();for($i=0;$i -lt ${Math.trunc(depth)} -and $p -gt 0;$i++){` +
         `$x=Get-CimInstance Win32_Process -Filter "ProcessId=$p" -ErrorAction SilentlyContinue;if(!$x){break};` +
@@ -131,8 +91,6 @@ function windowsAncestors(startPid, depth) {
         `ConvertTo-Json -InputObject @($o) -Compress`;
     const result = (0, node_child_process_1.spawnSync)("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script], {
         encoding: "utf8",
-        // A cold PowerShell start can take several seconds on a busy machine; the
-        // capture hook has 30s, and an unanswered walk just means "unknown".
         timeout: 10000,
         windowsHide: true,
     });
@@ -146,7 +104,6 @@ function windowsAncestors(startPid, depth) {
         return null;
     }
 }
-/** First launch value `fromCommand` finds among up to `depth` ancestors. */
 function detectLaunch(fromCommand, startPid, deps) {
     const depth = deps.depth ?? 5;
     if ((deps.platform ?? process.platform) === "win32" && !deps.ps) {
@@ -173,25 +130,18 @@ function detectLaunch(fromCommand, startPid, deps) {
     }
     return undefined;
 }
-/**
- * Walk up to `depth` ancestors (a shell or `npx` usually sits between Cursor
- * and the hook) and return the first Cursor launch found.
- */
 function detectCursorLaunch(startPid = process.ppid, deps = {}) {
     return detectLaunch(cursorLaunchFromCommand, startPid, deps);
 }
-/** The Copilot CLI that launched this hook (`copilot:print` / `copilot:cli`). */
 function detectCopilotLaunch(startPid = process.ppid, deps = {}) {
     return detectLaunch(copilotLaunchFromCommand, startPid, deps);
 }
-/** The launch value a hook invocation should carry into its capture job. */
 function hookLaunch(hookCommand, input, deps = {}) {
     if (typeof input.launch === "string" && VALUE.test(input.launch))
         return input.launch;
     if (hookCommand?.endsWith("-cursor"))
         return detectCursorLaunch();
     if (hookCommand?.endsWith("-copilot")) {
-        // VS Code names itself in workspace.yaml; only the CLI needs the walk.
         if (deps.copilotClientName === "vscode-agent-host")
             return "copilot:vscode";
         return (deps.detectCopilot ?? detectCopilotLaunch)();

package/dist/launcher.js

@@ -1,15 +1,4 @@
 "use strict";
-// Stable hook launcher.
-//
-// Harness configs used to bake the absolute path of whichever install ran
-// `connect` (…/node_modules/codiedev/dist/hook.js). That path is only stable
-// for npm/bun globals: pnpm puts every global install in a fresh hashed dir,
-// and repo checkouts, Homebrew cellar moves, etc. can strand it too. Instead,
-// every hook config points at one file we own —
-// <codiedevStateDir()>/bin/codiedev-hook-launcher.cjs — which forwards to the
-// install recorded in <codiedevStateDir()>/install.json. Moving to a new
-// install (self-update, re-connect) rewrites one JSON file, never the
-// harness configs, so Codex hook trust and IT-managed dotfiles stay put.
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -56,7 +45,6 @@ const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const configDir_1 = require("./configDir");
 exports.LAUNCHER_FILE = "codiedev-hook-launcher.cjs";
-// Bump when LAUNCHER_SOURCE changes so existing launchers get rewritten.
 const LAUNCHER_REVISION = 1;
 function launcherPath() {
     return path.join((0, configDir_1.codiedevStateDir)(), "bin", exports.LAUNCHER_FILE);
@@ -64,15 +52,9 @@ function launcherPath() {
 function installRecordPath() {
     return path.join((0, configDir_1.codiedevStateDir)(), "install.json");
 }
-/** True iff `cmd` invokes the stable launcher (from any state dir). */
 function usesLauncher(cmd) {
     return typeof cmd === "string" && cmd.includes(exports.LAUNCHER_FILE);
 }
-// Plain CommonJS with no dependencies: it runs under whatever node the harness
-// config names, before any of our modules load. `fallback` is the install the
-// launcher was written for, used if install.json is missing or points at a
-// directory that no longer exists. If neither exists it exits 0 so a stranded
-// hook can never fail the developer's session.
 function launcherSource(fallback) {
     return `// codiedev-hook-launcher revision ${LAUNCHER_REVISION}. Managed by codiedev; safe to delete (re-run \`codiedev connect\`).
 "use strict";
@@ -115,10 +97,6 @@ function packageVersionFor(hookScript) {
         return undefined;
     }
 }
-/**
- * The hook script worth recording: absolute and present, and a global install over an npx cache
- * copy (npm prunes ~/.npm/_npx, and hooks pointed there go quietly dead). Null = don't record.
- */
 function stableHookScript(hookScript, globalCandidates = globalHookScripts()) {
     if (!hookScript || !path.isAbsolute(hookScript) || hookScript.includes(`${path.sep}~${path.sep}`))
         return null;
@@ -131,7 +109,6 @@ function stableHookScript(hookScript, globalCandidates = globalHookScripts()) {
     }
     return hookScript;
 }
-/** Where a global `npm i -g codiedev` puts hook.js, next to the node running this. */
 function globalHookScripts() {
     const prefix = path.dirname(path.dirname(process.execPath));
     return [
@@ -139,7 +116,6 @@ function globalHookScripts() {
         path.join(prefix, "node_modules", "codiedev", "dist", "hook.js"),
     ];
 }
-/** Point the launcher at `hookScript`. Atomic, so a hook mid-launch never reads half a file. */
 function recordCurrentInstall(requested) {
     const hookScript = stableHookScript(requested);
     if (!hookScript)
@@ -158,12 +134,6 @@ function recordCurrentInstall(requested) {
     }
 }
 let ensuredFor;
-/**
- * Make sure the launcher exists and forwards to `hookScript`, returning the
- * launcher path to bake into hook configs — or null if the state dir is not
- * writable, in which case callers keep baking the direct path. Memoized:
- * one connect writes ~20 hook entries.
- */
 function ensureLauncher(requested) {
     const hookScript = stableHookScript(requested);
     if (!hookScript)
@@ -172,7 +142,6 @@ function ensureLauncher(requested) {
         return launcherPath();
     try {
         const target = launcherPath();
-        // A relative launcher path in a hook config only works from one folder; never bake one.
         if (!path.isAbsolute(target))
             return null;
         const source = launcherSource(hookScript);
@@ -181,7 +150,6 @@ function ensureLauncher(requested) {
             current = fs.readFileSync(target, "utf8");
         }
         catch {
-            // first install
         }
         if (current !== source)
             writeAtomic(target, source);
@@ -195,7 +163,6 @@ function ensureLauncher(requested) {
         return null;
     }
 }
-// Test-only: the memo lives for the process lifetime.
 function resetLauncherCacheForTests() {
     ensuredFor = undefined;
 }

package/dist/limitEvent.js

@@ -14,7 +14,6 @@ function classifyLimitKind(text) {
         return "org_spend";
     return "other";
 }
-// "… · resets 9:50pm (UTC)" → "9:50pm (UTC)". Null when absent.
 function parseResetText(text) {
     const m = text.match(/resets\s+(.+?)\s*$/i);
     return m ? m[1].trim() : null;
@@ -27,8 +26,6 @@ function messageText(entry) {
         return c.map((x) => (x && typeof x === "object" ? x.text ?? "" : "")).join(" ");
     return "";
 }
-// Scans transcript JSONL for the LAST top-level `error: "rate_limit"` entry.
-// (Validated shape: error/isApiErrorMessage are top-level, not under message.)
 function parseLimitEventFromTranscript(transcript) {
     let found = null;
     for (const line of transcript.split("\n")) {
@@ -53,29 +50,6 @@ function parseLimitEventFromTranscript(transcript) {
     }
     return found;
 }
-/**
- * Codex's `rate_limit_reached_type` is exactly five values (read off the 0.154
- * binary): `rate_limit_reached`, `workspace_{owner,member}_credits_depleted`
- * and `workspace_{owner,member}_usage_limit_reached`.
- *
- * The split that matters to a reader of the dashboard is "someone must act on
- * money" vs "this dev is throttled and it will reset" — so map on what the
- * snapshot actually asserts, not on the word "credits":
- *
- * - A member out of their OWN allowance is a rate limit. Real snapshots carry
- *   `spend_control_reached: null` and `individual_limit: null` — nobody
- *   configured a budget, the window is simply used up. Calling that personal
- *   spend tells a manager the dev overspent, which is not what happened.
- *
- *   Deliberately NOT gated on `individual_limit`: it has only ever been
- *   observed null, so its populated shape and meaning are unknown, and a
- *   wrong guess reinstates the mislabel this exists to remove. The reason
- *   string is the causal signal; `individual_limit` is at best correlative.
- * - A member whose ADMIN capped them (`usage_limit_reached`) is personal spend:
- *   there really is a cap, and someone can raise it.
- * - Anything owner-scoped is org spend — the org's allowance or credits are
- *   gone and somebody has to act.
- */
 function codexLimitKind(reason, spendControlReached) {
     if (spendControlReached || reason.startsWith("workspace_owner_"))
         return "org_spend";
@@ -96,7 +70,6 @@ function codexResetText(rateLimits) {
         .sort((a, b) => a - b)[0];
     return resetAt ? new Date(resetAt * 1000).toISOString() : null;
 }
-/** Parse the structured rate-limit snapshot written to Codex rollout JSONL. */
 function parseCodexLimitEventFromTranscript(transcript) {
     let found = null;
     for (const line of transcript.split("\n")) {
@@ -131,7 +104,6 @@ function parseCodexLimitEventFromTranscript(transcript) {
     }
     return found;
 }
-/** Only explicit provider errors qualify; never scan user/assistant prose. */
 function parseNativeLimitError(input, now = Date.now()) {
     const context = input.errorContext ?? input.error_context;
     if (context !== undefined && context !== "model_call")
@@ -162,19 +134,15 @@ function parseNativeLimitEventFromTranscript(transcript) {
                 continue;
             }
             if (!entry.timestamp)
-                continue; // no stable timestamp means snapshots cannot deduplicate
+                continue;
             if (entry.type === "agent.error" || entry.type === "session.error") {
                 found = parseNativeLimitError({ ...(entry.data ?? entry), timestamp: entry.timestamp }) ?? found;
             }
         }
-        catch { /* tolerant of incomplete transcript tails */ }
+        catch { }
     }
     return found;
 }
-// Tail of the raw transcript to ship with the limit event so the server can
-// summarize "what they were working on" immediately — without waiting for the
-// SessionEnd capture (which can lag hours, or drop entirely on Windows).
-// Resumes at a line boundary so every JSONL line in the tail still parses.
 const DEFAULT_TAIL_CHARS = 65536;
 function tailForLimitEvent(transcript, maxChars = DEFAULT_TAIL_CHARS) {
     if (transcript.length <= maxChars)

package/dist/managedPi.js

@@ -40,28 +40,6 @@ exports.prepareManagedPiDir = prepareManagedPiDir;
 exports.managedPiEnv = managedPiEnv;
 exports.managedPiArgs = managedPiArgs;
 exports.runManagedPi = runManagedPi;
-// `codie --pi [args]`: pi as a Codiedev harness, on the company's approved
-// gateway models (the same catalog and key the OpenCode engine uses).
-//
-// The managed launch closes every path to a model that skips the gateway
-// instead of trusting the user's ~/.pi:
-//   - pi runs from a Codiedev-owned agent dir (PI_CODING_AGENT_DIR), rewritten
-//     on every launch: only the `codiedev` provider, no packages, no
-//     extensions and no auth.json (so no stored provider credentials).
-//   - provider API keys pi would read from the environment are removed.
-//   - extension discovery is off (`--no-extensions`, which also skips
-//     project-local .pi/extensions); the only extensions are the guard below
-//     and the Codiedev capture extension.
-//   - flags that bring their own credentials or code (--api-key, --provider,
-//     -e) and the package subcommands are refused.
-//   - the guard points every other provider at a dead loopback address and
-//     keeps the session on an approved model, which covers an in-session
-//     /login too. Throwing from pi's before_provider_request does NOT stop a
-//     request (pi logs it and sends anyway), hence the base-URL override.
-//
-// Sessions, skills, prompts, themes and context files keep working; they
-// don't reach a model on their own. Ported from #1783, minus the harness-pack
-// proxy: pi talks to the gateway directly, like `codie`.
 const child_process_1 = require("child_process");
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
@@ -69,7 +47,6 @@ const codieLauncher_1 = require("./codieLauncher");
 const piRuntime_1 = require("./piRuntime");
 const utils_1 = require("./utils");
 exports.PI_PROVIDER_ID = "codiedev";
-/** Env vars pi reads provider credentials from (`pi --help`, pi 0.73). */
 exports.PI_PROVIDER_ENV = [
     "ANTHROPIC_API_KEY", "ANTHROPIC_OAUTH_TOKEN", "OPENAI_API_KEY", "AZURE_OPENAI_API_KEY",
     "AZURE_OPENAI_BASE_URL", "AZURE_OPENAI_RESOURCE_NAME", "DEEPSEEK_API_KEY", "GEMINI_API_KEY",
@@ -81,18 +58,10 @@ exports.PI_PROVIDER_ENV = [
     "AWS_BEARER_TOKEN_BEDROCK", "GOOGLE_APPLICATION_CREDENTIALS", "GOOGLE_CLOUD_API_KEY",
     "COPILOT_GITHUB_TOKEN",
 ];
-/** pi subcommands that install or change extension sources. */
 const BLOCKED_SUBCOMMANDS = new Set(["install", "remove", "uninstall", "config"]);
 exports.GUARD_FILE = "codie-guard.ts";
 exports.CAPTURE_FILE = "codiedev-capture.ts";
-/** Where the guard points every other provider: a loopback port nothing
- * listens on, so a request (and whatever key it carries) never leaves the
- * machine. */
 exports.BLOCKED_BASE_URL = "http://127.0.0.1:9/blocked-by-codiedev";
-/** The pi extension that keeps a managed session on Codiedev models and tags
- * each gateway request with the session, repo and skills, so gateway billing
- * joins the captured pi session (same headers as the OpenCode metadata
- * plugin, assets/git-refs.mjs). */
 exports.GUARD_SOURCE = `// Written by Codiedev on every \`codie --pi\` launch. Edits are overwritten.
 import { execFile, execFileSync } from "node:child_process";
 import { readFileSync } from "node:fs";
@@ -180,8 +149,6 @@ export default function (pi) {
 function managedPiAgentDir(stateDir) {
     return path.join(stateDir, "managed", "pi", "agent");
 }
-/** pi's models.json entry for the gateway. The key is read from
- * CODIEDEV_GATEWAY_KEY at request time (pi resolves an env var name). */
 function piProviderConfig(gatewayUrl, catalog) {
     return {
         baseUrl: gatewayUrl.replace(/\/+$/, ""),
@@ -192,9 +159,6 @@ function piProviderConfig(gatewayUrl, catalog) {
             id: (0, codieLauncher_1.bareModel)(model.id),
             name: model.name || (0, codieLauncher_1.bareModel)(model.id),
             ...(model.limit ? { contextWindow: model.limit.context, maxTokens: model.limit.output } : {}),
-            // pi shows a session's spend from this. The gateway publishes prompt and
-            // completion prices only, so cache is unpriced; gateway settlement is
-            // the true figure.
             ...(model.cost ? { cost: { input: model.cost.input, output: model.cost.output, cacheRead: 0, cacheWrite: 0 } } : {}),
         })),
     };
@@ -204,8 +168,6 @@ function writeJsonAtomic(file, value) {
     fs.writeFileSync(tmp, JSON.stringify(value, null, 2) + "\n", { mode: 0o600 });
     fs.renameSync(tmp, file);
 }
-/** Rewrite everything Codiedev owns in the managed agent dir. Sessions (and
- * anything else pi keeps there) are left alone. Returns the extensions to load. */
 function prepareManagedPiDir(opts) {
     const { agentDir, gatewayUrl, catalog } = opts;
     if (!catalog.length)
@@ -226,22 +188,18 @@ function prepareManagedPiDir(opts) {
         skills: opts.skillPaths ?? [],
         enableInstallTelemetry: false,
     });
-    // Stored provider credentials (a /login from an earlier session) and any
-    // extensions dropped into the dir go away on every launch.
     fs.rmSync(path.join(agentDir, "auth.json"), { force: true });
     fs.rmSync(path.join(agentDir, "extensions"), { recursive: true, force: true });
     const guard = path.join(agentDir, exports.GUARD_FILE);
     fs.writeFileSync(guard, exports.GUARD_SOURCE, { mode: 0o600 });
     const capture = path.join(agentDir, exports.CAPTURE_FILE);
-    fs.writeFileSync(capture, (0, utils_1.piExtensionSource)(opts.agentSecurityEnabled), { mode: 0o600 });
+    fs.writeFileSync(capture, (0, utils_1.piExtensionSource)(), { mode: 0o600 });
     return [guard, capture];
 }
-/** The child env: no provider credentials, pi pointed at the managed dir. */
 function managedPiEnv(env, agentDir, key, platform = process.platform) {
     const blocked = new Set([...exports.PI_PROVIDER_ENV, "PI_CODING_AGENT_DIR"]);
     const out = {};
     for (const [k, v] of Object.entries(env)) {
-        // Windows env names are case-insensitive.
         if (blocked.has(platform === "win32" ? k.toUpperCase() : k))
             continue;
         out[k] = v;
@@ -254,8 +212,6 @@ function managedPiEnv(env, agentDir, key, platform = process.platform) {
 class ManagedPiArgError extends Error {
 }
 exports.ManagedPiArgError = ManagedPiArgError;
-/** Refuse what would bring other credentials or code into the session, then
- * pin extension loading to the managed extensions. */
 function managedPiArgs(args, extensions) {
     if (args.length && BLOCKED_SUBCOMMANDS.has(args[0])) {
         throw new ManagedPiArgError(`\`pi ${args[0]}\` changes extension sources, which codie --pi manages. Ask your Codiedev admin to approve a package instead.`);
@@ -282,12 +238,9 @@ function runManagedPi(opts) {
     const agentDir = managedPiAgentDir(opts.stateDir);
     const extensions = prepareManagedPiDir({
         agentDir, gatewayUrl: opts.gatewayUrl, catalog: opts.catalog, model: env.CODIEDEV_MODEL,
-        skillPaths: opts.skillPaths, agentSecurityEnabled: opts.agentSecurityEnabled,
+        skillPaths: opts.skillPaths,
     });
     const args = managedPiArgs(opts.args, extensions);
-    // CODIEDEV_PI_BIN runs a specific pi binary (tests, canaries pinned to a
-    // version). Otherwise pi is Codiedev's own pinned install, fetched on first
-    // use like the Codie engine and run on this Node.
     const bin = env.CODIEDEV_PI_BIN?.trim();
     const [command, commandArgs] = bin
         ? [bin, args]
@@ -295,7 +248,6 @@ function runManagedPi(opts) {
     const result = (0, child_process_1.spawnSync)(command, commandArgs, {
         stdio: "inherit",
         env: managedPiEnv(env, agentDir, opts.key),
-        // A pi binary given as an npm launcher is a .cmd shim on Windows.
         shell: Boolean(bin) && process.platform === "win32",
     });
     if (result.error)

package/dist/mcp.js

@@ -1,15 +1,5 @@
 #!/usr/bin/env node
 "use strict";
-/**
- * Codiedev MCP server.
- *
- * Exposes the Codiedev artifact-collaboration surface as Model Context
- * Protocol tools so Claude Code / Codex / any MCP-capable agent can invoke
- * them natively from natural language (e.g. "push the spec we just worked on").
- *
- * Reads the same ~/.codiedev/config.json the CLI uses. Install + wire up by
- * running `npx codiedev connect`.
- */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -55,8 +45,6 @@ const cliSession_1 = require("./cliSession");
 const shared_1 = require("./commands/shared");
 const inboxFormat_1 = require("./inboxFormat");
 const PKG_NAME = "codiedev";
-// Read version from the bundled package.json so the startup log + tool reports
-// always reflect the actually-installed version, rather than a stale constant.
 const PKG_VERSION = (() => {
     try {
         const pkgPath = path.resolve(__dirname, "..", "package.json");
@@ -66,10 +54,6 @@ const PKG_VERSION = (() => {
         return "unknown";
     }
 })();
-// ─────────────────────────────────────────────────────────────────────────────
-// Tool definitions — descriptions tuned so Claude/Codex resolve natural-language
-// requests into the right tool without manual steering.
-// ─────────────────────────────────────────────────────────────────────────────
 const TOOLS = [
     {
         name: "codiedev_push",
@@ -372,17 +356,10 @@ const TOOLS = [
         },
     },
 ];
-// ─────────────────────────────────────────────────────────────────────────────
-// Server
-// ─────────────────────────────────────────────────────────────────────────────
 const server = new index_js_1.Server({ name: PKG_NAME, version: PKG_VERSION }, { capabilities: { tools: {} } });
 server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => ({
     tools: TOOLS,
 }));
-/**
- * Fire-and-forget telemetry — POST one event per tool invocation. Never blocks,
- * never throws into the user-facing path. Drop silently on any failure.
- */
 function emitTelemetry(config, event) {
     if (!config)
         return;
@@ -396,11 +373,9 @@ function emitTelemetry(config, event) {
             mcpVersion: PKG_VERSION,
         },
     }).catch(() => {
-        // Swallow — telemetry should never affect the user's session.
     });
 }
 server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
-    // Long-lived process: the access token may expire while it runs.
     await (0, cliSession_1.ensureFreshToken)({ configPath: utils_1.CONFIG_PATH }).catch(() => undefined);
     const config = (0, utils_1.readConfig)();
     if (!config) {
@@ -517,10 +492,6 @@ async function handlePull(args, config) {
         throw new Error("key required");
     const res = await (0, shared_1.apiRequest)("GET", "/api/cli/pull", { config, query: { key, version } });
     const a = res.artifact;
-    // Lead with the new-vocab kind. Legacy doc-shape (spec/decision/...) is
-    // surfaced as a tag list after, so callers still see it but it's no
-    // longer the primary label. Falls back to "doc" if the row pre-dates the
-    // kind field.
     const kindLabel = a.kind ?? "doc";
     const tagList = (a.tags ?? []).filter((t) => t).join(", ");
     const tagSuffix = tagList ? ` · tags: ${tagList}` : "";
@@ -528,8 +499,6 @@ async function handlePull(args, config) {
         `**${kindLabel}** · v${a.version ?? 1} · ${a.lifecycle ?? "draft"}${tagSuffix} · ` +
         `updated ${(0, shared_1.timeAgo)(a.updatedAt ?? a.createdAt)}\n\n---\n\n`;
     return {
-        // A skill's text carries its identity marker, so a copy the agent writes
-        // to disk still attributes its runs exactly (skillMarker.ts).
         content: [{ type: "text", text: header + (a.kind === "skill" || (!a.kind && (0, skillMarker_1.looksLikeSkill)(a.markdown)) ? (0, skillMarker_1.stampSkillMarker)(a.markdown, a._id) : a.markdown) }],
     };
 }
@@ -606,9 +575,6 @@ async function handleInbox(args, config) {
         config,
         query: { unreadOnly: unreadOnly ? "1" : undefined, limit },
     });
-    // Shared with `codiedev inbox` so this agent-facing path can never drift
-    // back to pings-only. CLAUDE.md routes "any messages?" here, so a
-    // mentions-blind version reproduces the bug for agents.
     const text = (0, inboxFormat_1.formatInbox)({
         pings: res.pings,
         mentions: res.mentions,
@@ -660,8 +626,6 @@ async function handleShareWith(args, config) {
                 ],
             };
         }
-        // noop / duplicate path — surface where the existing grant came from so
-        // the user knows whether to expect it next time.
         const e = res.existing;
         let why = "";
         if (e) {
@@ -794,9 +758,6 @@ async function handleGetLibrary(args, config) {
         const v = a.version ? ` v${a.version}` : "";
         const life = a.lifecycle ? ` · ${a.lifecycle}` : "";
         const when = a.updatedAt ? ` · ${(0, shared_1.timeAgo)(a.updatedAt)}` : "";
-        // Lead with the canonical kind (doc | skill). Tags carry the legacy
-        // doc-shape (spec/decision/...) plus any author-added labels — surface
-        // them after the kind so the row is self-describing.
         const k = a.kind ?? (a.type === "note" ? "doc" : "doc");
         const tagList = (a.tags ?? []).length > 0 ? ` [${a.tags.join(", ")}]` : "";
         lines.push(`[${k}]${tagList} ${loc}${a.key ?? a.title}${v}${life}${when}`);
@@ -823,9 +784,6 @@ function formatAmbiguousRecipient(err, to) {
     }
     throw err;
 }
-// ─────────────────────────────────────────────────────────────────────────────
-// Helpers
-// ─────────────────────────────────────────────────────────────────────────────
 function asString(v) {
     return typeof v === "string" ? v : "";
 }
@@ -843,20 +801,14 @@ function asStringArrayOrUndefined(v) {
         return undefined;
     return v.filter((x) => typeof x === "string");
 }
-// ─────────────────────────────────────────────────────────────────────────────
-// Main
-// ─────────────────────────────────────────────────────────────────────────────
 async function main() {
     const transport = new stdio_js_1.StdioServerTransport();
     await server.connect(transport);
-    // stdio transport handles I/O until process exits.
-    // Log to stderr only — stdout is reserved for MCP protocol.
     process.stderr.write(`[codiedev-mcp] ready (v${PKG_VERSION}, config ${(0, utils_1.readConfig)() ? "present" : "missing"})\n`);
 }
 main().catch((err) => {
     process.stderr.write(`[codiedev-mcp] fatal: ${err.message}\n`);
     process.exit(1);
 });
-// Avoid "Cannot find name 'path', 'fs'" since we imported them but may not use.
 void path;
 void fs;