codiedev 0.9.82 → 0.9.83

package/dist/launcher.d.ts

@@ -8,9 +8,14 @@ export declare function launcherPath(): string;
 /** True iff `cmd` invokes the stable launcher (from any state dir). */
 export declare function usesLauncher(cmd: string | undefined): boolean;
 export declare function readInstallRecord(): InstallRecord | null;
+/** True if `p` is inside the OS temp folder (real paths, so /var vs /private/var on macOS match). */
+export declare function isInTempDir(p: string, tmp?: string): boolean;
 /**
  * The hook script worth recording: absolute and present, and a global install over an npx cache
  * copy (npm prunes ~/.npm/_npx, and hooks pointed there go quietly dead). Null = don't record.
+ * Never a build in the temp folder: test runs stage one there, delete it, and if that landed in
+ * the real install.json every hook went quietly dead. CODIEDEV_ALLOW_TEMP_HOOK=1 (the CLI's own
+ * test setup) lets sandboxed tests use one.
  */
 export declare function stableHookScript(hookScript: string, globalCandidates?: string[]): string | null;
 /** Point the launcher at `hookScript`. Atomic, so a hook mid-launch never reads half a file. */

package/dist/launcher.js

@@ -48,16 +48,18 @@ exports.LAUNCHER_FILE = void 0;
 exports.launcherPath = launcherPath;
 exports.usesLauncher = usesLauncher;
 exports.readInstallRecord = readInstallRecord;
+exports.isInTempDir = isInTempDir;
 exports.stableHookScript = stableHookScript;
 exports.recordCurrentInstall = recordCurrentInstall;
 exports.ensureLauncher = ensureLauncher;
 exports.resetLauncherCacheForTests = resetLauncherCacheForTests;
 const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const configDir_1 = require("./configDir");
 exports.LAUNCHER_FILE = "codiedev-hook-launcher.cjs";
 // Bump when LAUNCHER_SOURCE changes so existing launchers get rewritten.
-const LAUNCHER_REVISION = 1;
+const LAUNCHER_REVISION = 2;
 function launcherPath() {
     return path.join((0, configDir_1.codiedevStateDir)(), "bin", exports.LAUNCHER_FILE);
 }
@@ -85,6 +87,12 @@ try {
   if (rec && typeof rec.hookScript === "string" && fs.existsSync(rec.hookScript)) target = rec.hookScript;
 } catch {}
 if (!target && fs.existsSync(FALLBACK)) target = FALLBACK;
+if (!target) {
+  // Both stranded (e.g. a deleted temp build): use a global install next to this node.
+  const prefix = path.dirname(path.dirname(process.execPath));
+  target = [path.join(prefix, "lib", "node_modules", "codiedev", "dist", "hook.js"),
+    path.join(prefix, "node_modules", "codiedev", "dist", "hook.js")].find((p) => fs.existsSync(p)) || null;
+}
 if (!target) process.exit(0);
 process.env.CODIEDEV_VIA_LAUNCHER = "1";
 process.argv[1] = target;
@@ -115,15 +123,34 @@ function packageVersionFor(hookScript) {
         return undefined;
     }
 }
+/** True if `p` is inside the OS temp folder (real paths, so /var vs /private/var on macOS match). */
+function isInTempDir(p, tmp = os.tmpdir()) {
+    const real = (x) => {
+        try {
+            return fs.realpathSync(x);
+        }
+        catch {
+            return path.resolve(x);
+        }
+    };
+    const rel = path.relative(real(tmp), real(p));
+    return rel !== "" && !rel.startsWith("..") && !path.isAbsolute(rel);
+}
 /**
  * The hook script worth recording: absolute and present, and a global install over an npx cache
  * copy (npm prunes ~/.npm/_npx, and hooks pointed there go quietly dead). Null = don't record.
+ * Never a build in the temp folder: test runs stage one there, delete it, and if that landed in
+ * the real install.json every hook went quietly dead. CODIEDEV_ALLOW_TEMP_HOOK=1 (the CLI's own
+ * test setup) lets sandboxed tests use one.
  */
 function stableHookScript(hookScript, globalCandidates = globalHookScripts()) {
     if (!hookScript || !path.isAbsolute(hookScript) || hookScript.includes(`${path.sep}~${path.sep}`))
         return null;
     if (!fs.existsSync(hookScript))
         return null;
+    if (process.env.CODIEDEV_ALLOW_TEMP_HOOK !== "1" && isInTempDir(hookScript)) {
+        return globalCandidates.find((p) => path.isAbsolute(p) && fs.existsSync(p) && !isInTempDir(p)) ?? null;
+    }
     if (hookScript.includes(`${path.sep}_npx${path.sep}`)) {
         const global = globalCandidates.find((p) => path.isAbsolute(p) && fs.existsSync(p));
         if (global)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codiedev",
-  "version": "0.9.82",
+  "version": "0.9.83",
   "description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness",
   "bin": {
     "codiedev": "dist/cli.js",