codiedev 0.9.80 → 0.10.0-beta.10

package/dist/codie.js

@@ -1,15 +1,5 @@
 #!/usr/bin/env node
 "use strict";
-// `codie` — Codiedev's governed coding harness.
-//
-// Ships from the same package as `codiedev` so a developer runs one install and
-// then picks their surface: Claude Code, Codex, and Cursor get session capture
-// via `codiedev connect`; `codie` launches the governed harness against the
-// same token. OpenCode is the embedded engine; all user-facing identity,
-// credentials, models, policy, and capture belong to Codiedev.
-//
-// The engine is downloaded on first run (see codieRuntime.ts) so capture-only
-// users never pay for it.
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -60,12 +50,7 @@ const codie_1 = require("./packs/codie");
 const paths_1 = require("./packs/paths");
 const managedPi_1 = require("./managedPi");
 const cliSession_1 = require("./cliSession");
-// The engine reads its gateway key once, at launch. With browser sign-in the
-// key is a 24h access token, so start every session with at least 12h left
-// (refreshing first if needed) instead of one that dies mid-task.
 const CODIE_MIN_TOKEN_VALIDITY_MS = 12 * 60 * 60_000;
-// How long to let the gateway finish booking the last request before asking
-// what the session cost.
 const USAGE_SETTLE_MS = 1200;
 function git(args) {
     const result = (0, child_process_1.spawnSync)("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
@@ -95,9 +80,6 @@ function existingInlineConfig() {
         throw new Error("OPENCODE_CONFIG_CONTENT is not valid JSON");
     }
 }
-// The one credential. `codiedev connect` wrote it; the gateway validates the
-// same userApiTokens row (a browser sign-in reports through its own row), so
-// there is no second harness token to mint.
 function connectedCodiedevConfig() {
     try {
         return JSON.parse(fs.readFileSync(path.join((0, configDir_1.codiedevStateDir)(), "config.json"), "utf8"));
@@ -106,12 +88,8 @@ function connectedCodiedevConfig() {
         return {};
     }
 }
-// Starter packs (`codiedev pack install`) reach Codie here: skills, agents and
-// the hook shim are merged into the inline config at launch. Best-effort — a
-// broken pack must never stop the harness from starting.
 function withStarterPacks(existing, approved, catalog) {
     try {
-        // Agent levels (opus/sonnet/haiku) resolve against this account's catalog.
         const packs = (0, codie_1.codiePackConfig)((0, paths_1.packsRoot)(), { approvedModels: approved, catalog });
         if (process.env.CODIEDEV_DEBUG) {
             for (const note of packs.notes)
@@ -125,13 +103,8 @@ function withStarterPacks(existing, approved, catalog) {
     }
 }
 function assetPath(name) {
-    // dist/codie.js → ../assets/<name>; src/codie.ts → ../assets/<name>.
     return path.join(__dirname, "..", "assets", name);
 }
-// Remove the engine's boot/exit banner wordmark in place (see
-// patchBrandWordmark). Best-effort like the TUI plugin: any failure rolls the
-// bytes back and the stock banner keeps working. Runs once per install; an
-// already-suppressed binary has no known source region and is skipped.
 function installBrandWordmark(runtime) {
     try {
         installBrandWordmarkUnsafe(runtime);
@@ -145,10 +118,6 @@ function installBrandWordmarkUnsafe(runtime) {
     const { changed, offset, replacement } = (0, codieLauncher_1.patchBrandWordmark)(binary);
     if (!changed || !replacement)
         return;
-    // In-place write (not copy+rename): opencode-ai/bin/opencode.exe and the
-    // platform package's binary are hardlinks to one inode, and this keeps them
-    // consistent. Restoring the original bytes is a true rollback — identical
-    // content revalidates the existing macOS signature.
     const writeAt = (bytes) => {
         const fd = fs.openSync(runtime, "r+");
         try {
@@ -161,7 +130,6 @@ function installBrandWordmarkUnsafe(runtime) {
     const restore = () => writeAt(binary.subarray(offset, offset + replacement.length));
     writeAt(replacement);
     if (process.platform === "darwin") {
-        // A modified Mach-O needs a fresh ad-hoc signature or the OS kills it.
         const signed = (0, child_process_1.spawnSync)("codesign", ["--force", "--sign", "-", runtime], { stdio: "ignore" });
         if (signed.status !== 0) {
             restore();
@@ -175,6 +143,49 @@ function installBrandWordmarkUnsafe(runtime) {
             (0, child_process_1.spawnSync)("codesign", ["--force", "--sign", "-", runtime], { stdio: "ignore" });
     }
 }
+async function runNonInteractive(runtime, runtimeArgs, env) {
+    const detached = process.platform !== "win32";
+    const child = (0, child_process_1.spawn)(runtime, runtimeArgs, {
+        stdio: ["pipe", "pipe", "pipe"],
+        env,
+        detached,
+    });
+    if (child.stdin)
+        process.stdin.pipe(child.stdin);
+    const signalChild = (signal) => {
+        if (detached && child.pid) {
+            try {
+                process.kill(-child.pid, signal);
+                return;
+            }
+            catch {
+            }
+        }
+        child.kill(signal);
+    };
+    const forwardInterrupt = () => signalChild("SIGINT");
+    const forwardTermination = () => signalChild("SIGTERM");
+    process.once("SIGINT", forwardInterrupt);
+    process.once("SIGTERM", forwardTermination);
+    return await new Promise((resolve, reject) => {
+        child.stdout?.on("data", (chunk) => process.stdout.write(chunk));
+        child.stderr?.on("data", (chunk) => process.stderr.write(chunk));
+        child.once("error", (error) => {
+            if (child.stdin)
+                process.stdin.unpipe(child.stdin);
+            process.removeListener("SIGINT", forwardInterrupt);
+            process.removeListener("SIGTERM", forwardTermination);
+            reject(error);
+        });
+        child.once("close", (status) => {
+            if (child.stdin)
+                process.stdin.unpipe(child.stdin);
+            process.removeListener("SIGINT", forwardInterrupt);
+            process.removeListener("SIGTERM", forwardTermination);
+            resolve(status);
+        });
+    });
+}
 async function main() {
     (0, codieRuntime_1.assertCodieNodeVersion)(process.versions.node);
     if (!process.env.CODIEDEV_GATEWAY_KEY && !process.env.CODIEDEV_TOKEN) {
@@ -184,9 +195,6 @@ async function main() {
         }
     }
     const connected = connectedCodiedevConfig();
-    // Browser sign-in: let the engine's per-request hook keep the 24h key
-    // fresh for sessions that run longer (assets/session-key.mjs). Not for an
-    // explicit key from the environment, and not for pasted API tokens.
     if (!process.env.CODIEDEV_GATEWAY_KEY && !process.env.CODIEDEV_TOKEN && connected.auth) {
         process.env.CODIEDEV_SESSION_CONFIG = path.join((0, configDir_1.codiedevStateDir)(), "config.json");
         process.env.CODIEDEV_CLI_JS = path.join(__dirname, "cli.js");
@@ -198,9 +206,6 @@ async function main() {
     if (!key) {
         throw new Error("Connect your Codiedev account first with `codiedev connect`");
     }
-    // Before anything paints: once the OpenCode engine owns stdio, a prompt is
-    // unreadable. A successful in-place upgrade relaunches this command with the
-    // new package, so the stale process must stop here.
     const update = await (0, upgradeNudge_1.maybeOfferUpgrade)();
     if (update.relaunched) {
         process.exitCode = update.status ?? 0;
@@ -208,8 +213,6 @@ async function main() {
     }
     const gatewayUrl = process.env.CODIEDEV_GATEWAY_URL || "https://gateway.codiedev.com/api/v1";
     const catalog = await (0, codieLauncher_1.fetchApprovedCatalog)({ baseUrl: gatewayUrl, key });
-    // `codie --pi [args]`: pi instead of the OpenCode engine, on the same
-    // approved catalog and gateway key (see managedPi.ts).
     if (process.argv[2] === "--pi") {
         let skillPaths = [];
         try {
@@ -222,8 +225,6 @@ async function main() {
         try {
             process.exitCode = (0, managedPi_1.runManagedPi)({
                 args: process.argv.slice(3), key, gatewayUrl, catalog, stateDir: (0, configDir_1.codiedevStateDir)(), skillPaths,
-                // This release line has no Agent Security hooks.
-                agentSecurityEnabled: false,
             });
         }
         catch (error) {
@@ -240,11 +241,20 @@ async function main() {
     }
     (0, codieLauncher_1.validateCodieArgs)(parsed.args, catalog);
     const stateDir = (0, configDir_1.codiedevStateDir)();
-    const runtime = (0, codieRuntimeInstall_1.ensureCodieRuntimeBinary)({
+    const runtime = await (0, codieRuntimeInstall_1.ensureCodieRuntimeBinary)({
         resolve: () => (0, codieRuntime_1.resolveCodieRuntime)({
             env: process.env,
             stateDir,
             existsSync: (candidate) => fs.existsSync(candidate),
+            readInstalledVersion: (candidate) => {
+                try {
+                    const value = JSON.parse(fs.readFileSync(candidate, "utf8"));
+                    return typeof value.version === "string" ? value.version : null;
+                }
+                catch {
+                    return null;
+                }
+            },
             resolveBundled: () => {
                 try {
                     return require.resolve("opencode-ai/bin/opencode.exe");
@@ -257,18 +267,24 @@ async function main() {
         }),
         install: (missing) => (0, codieRuntimeInstall_1.installCodieRuntimeOnDisk)(missing, stateDir),
         repair: (unlinked) => {
-            // npm 12 skips dependency install scripts; codie runs opencode-ai's own
-            // link step instead (not when npm is explicitly set to ignore scripts).
             console.error("codie: finishing the engine setup npm skipped (opencode-ai's postinstall)…");
             const linked = (0, codieRuntimeInstall_1.linkEngineOnDisk)(unlinked.packageDir);
-            // npm set to ignore scripts: a reinstall would hit the same wall, so stop
-            // with the one clear step instead of downloading again every run.
             if (!linked.ok && linked.detail === codieRuntimeInstall_1.IGNORE_SCRIPTS)
                 throw new Error((0, codieRuntimeInstall_1.linkFailure)(linked, unlinked.packageDir));
             if (!linked.ok)
                 console.error(`codie: ${(0, codieRuntimeInstall_1.linkFailure)(linked, unlinked.packageDir)} Reinstalling the engine.`);
             return linked.ok;
         },
+        confirmUpdate: async (outdated) => {
+            console.error("");
+            console.error(`Codie harness ${outdated.expectedVersion} is available (you're on ${outdated.currentVersion}).`);
+            if (!process.stdin.isTTY || !process.stdout.isTTY) {
+                console.error("Restart `codie` in an interactive terminal to update the harness.");
+                console.error("");
+                return false;
+            }
+            return await (0, upgradeNudge_1.promptYesNo)("  Update the harness now? [y/N] ");
+        },
     });
     const metadataPlugin = (0, url_1.pathToFileURL)(assetPath("opencode-plugin.mjs")).href;
     const capturePlugin = (0, codieLauncher_1.resolveCapturePlugin)({ homeDir: os.homedir(), existsSync: fs.existsSync });
@@ -292,10 +308,6 @@ async function main() {
     const runtimeArgs = (0, codieLauncher_1.withCodieWorkingDirectory)(parsed.args, process.cwd());
     const nonInteractiveRun = runtimeArgs[0] === "run";
     if (nonInteractiveRun) {
-        // The TUI paints its own live status line from the same endpoint. A
-        // non-interactive run has no TUI, so the budget arrives as two printed
-        // lines instead — and only for a human at a terminal, so a scripted run
-        // is neither slowed nor polluted.
         const reportCost = Boolean(process.stderr.isTTY);
         const startedAt = Date.now();
         if (reportCost) {
@@ -303,13 +315,8 @@ async function main() {
             if (line)
                 console.error(line);
         }
-        const result = (0, child_process_1.spawnSync)(runtime, runtimeArgs, { stdio: "inherit", env });
-        if (result.error)
-            throw result.error;
-        process.exitCode = result.status === null ? 1 : result.status;
+        process.exitCode = (await runNonInteractive(runtime, runtimeArgs, env)) ?? 1;
         if (reportCost) {
-            // The gateway books a request's cost after it has answered, so a poll
-            // fired the instant the run closes can miss the last one.
             await new Promise((resolve) => setTimeout(resolve, USAGE_SETTLE_MS));
             const cost = (0, codieUsage_1.formatSessionCostLine)(await (0, codieUsage_1.fetchCodieUsage)({ baseUrl: gatewayUrl, key, sinceMs: startedAt }));
             if (cost)

package/dist/codieBrandInstall.js

@@ -1,13 +1,4 @@
 "use strict";
-// Stages the Codiedev TUI plugin into the engine's config directory.
-//
-// TUI plugins load only from tui.json in the OpenCode config dir, so the
-// packaged template is copied there and referenced by a relative spec. The
-// copy also carries the status line, which needs an absolute path back into
-// this package — the plugin sits outside it and cannot reach it any other way.
-//
-// Every step is best-effort: a developer who cannot write this directory still
-// gets a working harness, just the stock logo and no status line.
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -50,15 +41,8 @@ const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const codieLauncher_1 = require("./codieLauncher");
 function assetPath(name) {
-    // dist/codieBrandInstall.js → ../assets/<name>; src/… → ../assets/<name>.
     return path.join(__dirname, "..", "assets", name);
 }
-/**
- * The usage module this install should load. The shipped package has the
- * compiled file; a source checkout (and the test run) has the TypeScript one.
- * Naming a path that does not exist would cost the status line silently, so a
- * miss raises instead and the caller falls back to the plain plugin.
- */
 function usageModulePath() {
     const candidates = [
         path.join(__dirname, "codieUsage.js"),
@@ -69,8 +53,6 @@ function usageModulePath() {
         throw new Error("this install has no Codiedev usage module");
     return found;
 }
-/** The engine resolves its config dir per the XDG spec, so a customized
- * XDG_CONFIG_HOME must be honored or tui.json lands where it never reads. */
 function openCodeConfigDir() {
     return path.join(process.env.XDG_CONFIG_HOME?.trim() || path.join(os.homedir(), ".config"), "opencode");
 }

package/dist/codieLauncher.js

@@ -1,13 +1,4 @@
 "use strict";
-// Pure launcher logic for the Codie harness.
-//
-// Ported from codiedev-gateway-cli/npm/lib/launcher.js when the harness folded
-// into this package so `npm i -g codiedev` is the only install a developer
-// needs — Claude Code, Codex, Cursor, and Codie all come from one package and
-// share the one token `codiedev connect` stored.
-//
-// Everything here is pure (no fs/network side effects beyond an injected
-// fetch) so the governance rules can be tested without a live gateway.
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -59,6 +50,7 @@ const path = __importStar(require("path"));
 const url_1 = require("url");
 const harnessDirs_1 = require("./harnessDirs");
 const DEFAULT_NAMES = {
+    "openai/gpt-5.6-luna": "GPT-5.6 Luna",
     "openai/gpt-5.3-codex": "GPT-5.3 Codex",
     "openai/gpt-5.2-codex": "GPT-5.2 Codex",
     "openai/gpt-5.1-codex-mini": "GPT-5.1 Codex Mini",
@@ -66,9 +58,6 @@ const DEFAULT_NAMES = {
     "z-ai/glm-5.2": "GLM 5.2 · Fireworks ZDR",
     "moonshotai/kimi-k2.7-code": "Kimi K2.7 Code · Fireworks ZDR",
 };
-/** A rate card is usable only when both sides are real, finite and not
- * negative. Half a card prices a session wrong in a way nobody can see, so a
- * partial one is dropped and the model stays unpriced. */
 function usableModelCost(value) {
     if (!value || typeof value !== "object")
         return undefined;
@@ -81,10 +70,6 @@ function usableModelCost(value) {
         return undefined;
     return { input, output };
 }
-/** A context/output window is usable only when both sides are real, finite and
- * positive. A partial window makes the engine's "% of context used" read wrong
- * in a way nobody can see, so a partial one is dropped and the model keeps the
- * engine's default. */
 function usableModelLimit(value) {
     if (!value || typeof value !== "object")
         return undefined;
@@ -97,12 +82,6 @@ function usableModelLimit(value) {
         return undefined;
     return { context, output };
 }
-/**
- * Pin non-interactive runs to the directory where `codie` was launched.
- * OpenCode can reuse a previously-known project instance; without an explicit
- * --dir, a real smoke run launched in a throwaway repo resumed the caller's
- * main checkout and executed there. TUI mode already owns its cwd directly.
- */
 function withCodieWorkingDirectory(args, cwd) {
     if (args[0] !== "run")
         return args;
@@ -124,8 +103,6 @@ function governedModel(value, approved, fallback, label) {
     return `codiedev/${model}`;
 }
 function economicalModel(catalog, primary) {
-    // Catalog ids arrive already normalized through bareModel(), so the
-    // gateway's `codiedev/fast` alias appears here as plain "fast".
     const preferred = ["openai/gpt-5.1-codex-mini", "fast", "z-ai/glm-5.2"];
     return preferred.find((id) => catalog.some((model) => model.id === id)) || primary;
 }
@@ -157,11 +134,6 @@ function buildCodieConfig({ existing = {}, catalog, env = {}, plugin, plugins =
     const existingPlugins = Array.isArray(existing.plugin) ? existing.plugin : [];
     const requiredPlugins = [...plugins, plugin].filter(Boolean);
     const models = Object.fromEntries(catalog.map((model) => {
-        // The engine prices a session from this rate card. Without it every
-        // model reads $0.00, which is how the harness came to show no spend at
-        // all. The gateway publishes prompt and completion prices only, so
-        // cached tokens are priced at zero here and the engine's session figure
-        // stays an estimate — the budget line from /me/usage is the true spend.
         const cost = usableModelCost(model.cost);
         const limit = usableModelLimit(model.limit);
         return [
@@ -201,14 +173,6 @@ function buildCodieConfig({ existing = {}, catalog, env = {}, plugin, plugins =
     };
 }
 exports.USAGE_MODULE_PLACEHOLDER = "__CODIEDEV_USAGE_MODULE__";
-/**
- * Point the staged TUI plugin at this install's usage module.
- *
- * The plugin is copied into the engine's own config directory, so it cannot
- * reach the package by a relative path — the absolute path is baked in at
- * stage time. It goes in as a JSON literal so a Windows path keeps its
- * backslashes instead of turning into escape sequences.
- */
 function stageUsageModule(source, modulePath) {
     if (!source.includes(exports.USAGE_MODULE_PLACEHOLDER)) {
         throw new Error(`plugin template is missing the ${exports.USAGE_MODULE_PLACEHOLDER} placeholder`);
@@ -216,8 +180,6 @@ function stageUsageModule(source, modulePath) {
     return source.split(exports.USAGE_MODULE_PLACEHOLDER).join(JSON.stringify(modulePath));
 }
 exports.BRAND_PLUGIN_SPEC = "./plugins/codiedev-brand.tsx";
-// Pure merge for ~/.config/opencode/tui.json: TUI plugins load from tui.json,
-// not the opencode.json we inject via OPENCODE_CONFIG_CONTENT.
 function withBrandPlugin(existing) {
     const config = existing && typeof existing === "object" && !Array.isArray(existing) ? existing : {};
     const plugins = Array.isArray(config.plugin) ? config.plugin : [];
@@ -226,13 +188,6 @@ function withBrandPlugin(existing) {
         return { config, changed: false };
     return { config: { ...config, plugin: [...plugins, exports.BRAND_PLUGIN_SPEC] }, changed: true };
 }
-// ── Engine wordmark suppression ─────────────────────────────────────────
-// The OpenCode engine prints a block-letter "opencode" wordmark to terminal
-// scrollback around each session (the boot/exit banner). A four-row terminal
-// raster cannot reproduce the real Codiedev wordmark cleanly, so leave that
-// surface blank and keep the proper brand mark on the plugin-driven home
-// screen. The bundled JS table is replaced byte-for-byte so binary offsets do
-// not move.
 function escapeJsSource(row) {
     let out = "";
     for (const ch of row) {
@@ -245,7 +200,6 @@ function wordmarkRegion(left, right, { escapeUnicode = true } = {}) {
     const rows = (list) => list.map((row) => `"${escapeUnicode ? escapeJsSource(row) : row}"`).join(",");
     return `var vn={left:[${rows(left)}],right:[${rows(right)}]};`;
 }
-// o p e n | c o d e — must match the engine's bundle byte-for-byte.
 exports.STOCK_WORDMARK = wordmarkRegion([
     "                   ",
     "█▀▀█ █▀▀█ █▀▀█ █▀▀▄",
@@ -257,12 +211,6 @@ exports.STOCK_WORDMARK = wordmarkRegion([
     "█___ █__█ █__█ █^^^",
     "▀▀▀▀ ▀▀▀▀ ▀▀▀▀ ▀▀▀▀",
 ]);
-// c o d i | e d e v, rasterized from public/codiedevlogo.svg at eight vertical
-// pixels and packed into four terminal rows with half-block characters. This
-// preserves the real mark's round lowercase bowls, linked c/o, ascenders, and
-// compact v instead of approximating the letters with OpenCode's square font.
-// The engine inserts one column between left and right, so the blank source
-// column at the codi/edev boundary is intentionally omitted.
 const CODIE_LEFT = [
     "                   ▄ ▄",
     "  ▄▄█▄▄ ▄▄█▄▄  ▄████ █",
@@ -275,9 +223,6 @@ const CODIE_RIGHT = [
     "██▀▀█ █   █ ██▄▀█ ▀█▄█   ",
     "▀▀█▀▀ ▀▀▀▀▀  ▀▀▀▀  ▀▀    ",
 ];
-// Migration source for the first hand-drawn banner shipped during development.
-// Recognizing it lets an existing install upgrade in place instead of keeping
-// the old square letterforms until OpenCode happens to reinstall its binary.
 const LEGACY_CODIE_LEFT = [
     "             ▄  ▄  ",
     "█▀▀▀ █▀▀█ █▀▀█  █  ",
@@ -299,9 +244,6 @@ exports.LEGACY_CODIEDEV_WORDMARK = (() => {
     return wordmarkRegion(LEGACY_CODIE_LEFT, padded);
 })();
 exports.CODIEDEV_WORDMARK = (() => {
-    // Raw Unicode is valid JavaScript and costs fewer source bytes than \uXXXX.
-    // Put the remaining byte padding outside the strings so it cannot widen the
-    // rendered banner or shift its centering.
     const unpadded = wordmarkRegion(CODIE_LEFT, CODIE_RIGHT, { escapeUnicode: false });
     const deficit = Buffer.byteLength(exports.STOCK_WORDMARK) - Buffer.byteLength(unpadded);
     if (deficit < 0)
@@ -323,9 +265,6 @@ exports.HIDDEN_WORDMARK = (() => {
     }
     return region;
 })();
-// Pure: locate the stock or an earlier Codiedev wordmark in an engine binary.
-// Refuses to touch the file unless exactly one known region appears; an
-// already-hidden or reshaped upstream bundle is left alone.
 function patchBrandWordmark(binary) {
     const stock = Buffer.from(exports.STOCK_WORDMARK);
     const candidates = [stock, Buffer.from(exports.LEGACY_CODIEDEV_WORDMARK), Buffer.from(exports.CODIEDEV_WORDMARK)];
@@ -349,15 +288,8 @@ function resolveCapturePlugin({ homeDir, existsSync, }) {
     }
     return (0, url_1.pathToFileURL)(capturePath).href;
 }
-// A definite answer from the gateway (harness off, token rejected): retrying
-// can't change it.
 class CatalogRejected extends Error {
 }
-/**
- * The account's approved models. Every `codie` session starts here, so one
- * dropped connection or slow gateway reply would end the session before it
- * began; anything but a definite rejection is retried once.
- */
 async function fetchApprovedCatalog({ baseUrl, key, fetchImpl = fetch, retryDelayMs = 1_000, }) {
     try {
         return await fetchCatalogOnce(baseUrl, key, fetchImpl);
@@ -377,9 +309,6 @@ async function fetchCatalogOnce(baseUrl, key, fetchImpl) {
             headers: { Authorization: `Bearer ${key}` },
             signal: controller.signal,
         });
-        // The `codie` bin ships to every connected machine, including companies
-        // whose gateway is still switched off. Those developers must get an
-        // answer, not an HTTP status.
         if (response.status === 403) {
             throw new CatalogRejected("The Codie harness is not enabled for your company yet. Ask your Codiedev admin to turn it on — " +
                 "your session capture keeps working in the meantime.");

package/dist/codieRuntime.js

@@ -1,14 +1,4 @@
 "use strict";
-// Where the Codie harness gets its engine.
-//
-// The engine (`opencode-ai`) is a ~132MB platform binary. It is deliberately
-// NOT a dependency of this package: the overwhelming majority of installs are
-// capture-only (Claude Code, Codex, Cursor) and must not pay for a harness
-// they never launch. So `npm i -g codiedev` stays small, and the first `codie`
-// run downloads the engine into the Codiedev state dir.
-//
-// Resolution is pure and injectable so the precedence can be tested without
-// touching the network or a real 132MB install.
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -43,19 +33,15 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ENGINE_MIN_BYTES = exports.CODIE_MIN_NODE_MAJOR = exports.OPENCODE_RUNTIME_SPEC = void 0;
+exports.ENGINE_MIN_BYTES = exports.CODIE_MIN_NODE_MAJOR = exports.OPENCODE_RUNTIME_VERSION = exports.OPENCODE_RUNTIME_SPEC = void 0;
 exports.codieRuntimeDir = codieRuntimeDir;
 exports.isEngineSize = isEngineSize;
+exports.installedRuntimePackageJson = installedRuntimePackageJson;
 exports.resolveCodieRuntime = resolveCodieRuntime;
 exports.assertCodieNodeVersion = assertCodieNodeVersion;
 const path = __importStar(require("path"));
-// Pinned exactly, not a range. patchBrandWordmark() only rewrites bundles it
-// recognizes byte-for-byte, so a floating version would silently regress the
-// terminal branding whenever OpenCode ships a new build.
 exports.OPENCODE_RUNTIME_SPEC = "opencode-ai@1.18.4";
-// The harness needs 20; capture does not. package.json `engines` stays >=18 so
-// `codiedev connect` still installs for Node 18 users — this floor is enforced
-// at `codie` launch instead.
+exports.OPENCODE_RUNTIME_VERSION = exports.OPENCODE_RUNTIME_SPEC.slice(exports.OPENCODE_RUNTIME_SPEC.lastIndexOf("@") + 1);
 exports.CODIE_MIN_NODE_MAJOR = 20;
 function codieRuntimeDir(stateDir) {
     return path.join(stateDir, "runtime");
@@ -63,21 +49,14 @@ function codieRuntimeDir(stateDir) {
 function installedBinary(stateDir) {
     return path.join(codieRuntimeDir(stateDir), "node_modules", "opencode-ai", "bin", "opencode.exe");
 }
-/**
- * The real engine is a ~132MB native executable. opencode-ai ships
- * bin/opencode.exe as a ~500-byte shell script that only prints "postinstall
- * was not run" until its postinstall swaps the binary in; anything this small
- * is that placeholder, not an engine. Pure.
- */
 exports.ENGINE_MIN_BYTES = 1_000_000;
 function isEngineSize(bytes) {
     return bytes >= exports.ENGINE_MIN_BYTES;
 }
-function installedPackageDir(stateDir) {
-    return path.join(codieRuntimeDir(stateDir), "node_modules", "opencode-ai");
+function installedRuntimePackageJson(stateDir) {
+    return path.join(codieRuntimeDir(stateDir), "node_modules", "opencode-ai", "package.json");
 }
-function resolveCodieRuntime({ env, stateDir, existsSync, resolveBundled, isEngine = () => true, }) {
-    // 1. Explicit override — the air-gapped / pre-provisioned escape hatch.
+function resolveCodieRuntime({ env, stateDir, existsSync, readInstalledVersion, resolveBundled, isEngine = () => true, }) {
     const override = env.CODIEDEV_OPENCODE_BINARY?.trim();
     if (override) {
         if (!existsSync(override)) {
@@ -85,16 +64,32 @@ function resolveCodieRuntime({ env, stateDir, existsSync, resolveBundled, isEngi
         }
         return { kind: "ready", binary: override };
     }
-    // 2. A bundled engine, if this package was installed with one (dev checkout,
-    //    or a future vendored distribution).
     const bundled = resolveBundled();
     if (bundled && isEngine(bundled))
         return { kind: "ready", binary: bundled };
-    // 3. The lazily installed engine.
     const binary = installedBinary(stateDir);
     if (existsSync(binary)) {
-        if (!isEngine(binary)) {
-            return { kind: "unlinked", installDir: codieRuntimeDir(stateDir), binary, spec: exports.OPENCODE_RUNTIME_SPEC, packageDir: installedPackageDir(stateDir) };
+        const currentVersion = readInstalledVersion?.(installedRuntimePackageJson(stateDir)) ?? null;
+        if (!isEngine(binary) && (!currentVersion || currentVersion === exports.OPENCODE_RUNTIME_VERSION)) {
+            return {
+                kind: "unlinked",
+                installDir: codieRuntimeDir(stateDir),
+                binary,
+                spec: exports.OPENCODE_RUNTIME_SPEC,
+                packageDir: path.dirname(installedRuntimePackageJson(stateDir)),
+            };
+        }
+        if (currentVersion && currentVersion !== exports.OPENCODE_RUNTIME_VERSION) {
+            return {
+                kind: "outdated",
+                installDir: codieRuntimeDir(stateDir),
+                binary,
+                spec: exports.OPENCODE_RUNTIME_SPEC,
+                currentVersion,
+                expectedVersion: exports.OPENCODE_RUNTIME_VERSION,
+                linked: isEngine(binary),
+                packageDir: path.dirname(installedRuntimePackageJson(stateDir)),
+            };
         }
         return { kind: "ready", binary };
     }