codiedev 0.9.89 → 0.9.90

package/dist/utils.d.ts

@@ -111,6 +111,10 @@ export declare function openCodeInstalled(): boolean;
  * keeps `codiedev connect` as the only setup step even when Codie/OpenCode is
  * installed later. OpenCode loads this file from its documented plugin dir. */
 export declare function installOpenCodeCapturePlugin(): void;
+/** Rewrite an OpenCode plugin installed by an older CLI: one that still wires
+ * the retired Agent Security tool hooks, or predates the prompt guard (it
+ * would let a stopped prompt through). Only touches an existing Codiedev plugin. */
+export declare function ensureOpenCodePluginCurrent(): void;
 export declare function piInstalled(): boolean;
 /** Subcommands the pi extension calls, in the order inspectPiExtension checks. */
 export declare const PI_EXTENSION_SUBCOMMANDS: readonly ["session-start-pi", "backup-pi", "capture-pi-final", "discover-pi", "security-pre-pi", "security-post-pi", "security-failure-pi"];

package/dist/utils.js

@@ -64,6 +64,7 @@ exports.cursorInstalled = cursorInstalled;
 exports.copilotInstalled = copilotInstalled;
 exports.openCodeInstalled = openCodeInstalled;
 exports.installOpenCodeCapturePlugin = installOpenCodeCapturePlugin;
+exports.ensureOpenCodePluginCurrent = ensureOpenCodePluginCurrent;
 exports.piInstalled = piInstalled;
 exports.piExtensionSource = piExtensionSource;
 exports.installPiExtension = installPiExtension;
@@ -1165,6 +1166,22 @@ function installOpenCodeCapturePlugin() {
         `    const cwd = worktree || directory || process.cwd();\n` +
         `    const prompt = Array.isArray(output?.parts) ? output.parts.filter((part) => part?.type === "text").map((part) => part.text || "").join("\\n") : "";\n` +
         `    const decision = invokeSync(PROMPT, { session_id: id, cwd, prompt });\n` +
+        `    if (decision?.decision === "block") {\n` +
+        `      // A key in the prompt (Team Security setting): stop it before the model.\n` +
+        `      const reason = String(decision.reason || "Codiedev stopped this prompt.");\n` +
+        `      const toast = { title: "Prompt not sent", message: reason, variant: "error", duration: 12000 };\n` +
+        `      // Older SDKs take { body }, newer ones the fields themselves. The TUI\n` +
+        `      // follows a stopped prompt with its own generic \"Failed to send\n` +
+        `      // prompt\" toast; show ours now and again just after, so ours stays up.\n` +
+        `      const show = () => { try { Promise.resolve(client.tui.showToast({ body: toast, ...toast })).catch(() => {}); } catch {} };\n` +
+        `      show();\n` +
+        `      setTimeout(show, 600);\n` +
+        `      if (process.env.CODIEDEV_PROMPT_BLOCK_OUTPUT === "marker") {\n` +
+        `        process.stderr.write("__CODIEDEV_PROMPT_BLOCKED__" + JSON.stringify({ reason }) + "\\n");\n` +
+        `        process.exit(3);\n` +
+        `      }\n` +
+        `      throw new Error(reason);\n` +
+        `    }\n` +
         `    const context = decision?.hookSpecificOutput?.additionalContext;\n` +
         `    if (context && Array.isArray(output?.parts)) {\n` +
         `      // Preserve the native part IDs required by current engine schemas.\n` +
@@ -1215,6 +1232,20 @@ function installOpenCodeCapturePlugin() {
     fs.writeFileSync(OPENCODE_PLUGIN_PATH, source, { encoding: "utf8", mode: 0o600 });
     fs.chmodSync(OPENCODE_PLUGIN_PATH, 0o600);
 }
+/** Rewrite an OpenCode plugin installed by an older CLI: one that still wires
+ * the retired Agent Security tool hooks, or predates the prompt guard (it
+ * would let a stopped prompt through). Only touches an existing Codiedev plugin. */
+function ensureOpenCodePluginCurrent() {
+    try {
+        if (!fs.existsSync(OPENCODE_PLUGIN_PATH))
+            return;
+        const current = fs.readFileSync(OPENCODE_PLUGIN_PATH, "utf8");
+        if (!current.includes("SECURITY_PRE") && current.includes("CODIEDEV_PROMPT_BLOCK_OUTPUT"))
+            return;
+        installOpenCodeCapturePlugin();
+    }
+    catch { /* best-effort */ }
+}
 function piInstalled() {
     if (fs.existsSync((0, harnessDirs_1.piAgentDir)()))
         return true;
@@ -1318,8 +1349,14 @@ function piExtensionSource(agentSecurityEnabled) {
         `    if (event?.source === "extension") return { action: "continue" };\n` +
         `    const s = current(ctx);\n` +
         `    const decision = invokeSync(PROMPT, { session_id: s.id, cwd: s.cwd, prompt: event?.text ?? "" });\n` +
-        `    const reason = blockReason(decision);\n` +
-        `    if (reason) { warn(ctx, reason); return { action: "handled" }; }\n` +
+        `    if (decision?.decision === "block") {\n` +
+        `      // A key in the prompt (Team Security setting): pi never sends it.\n` +
+        `      const reason = String(decision.reason || "Codiedev stopped this prompt.");\n` +
+        `      if (ctx?.hasUI) { try { ctx.ui.notify(reason, "error"); } catch { process.stderr.write("\\n" + reason + "\\n"); } }\n` +
+        `      else process.stderr.write("\\n" + reason + "\\n");\n` +
+        `      pendingContext = null;\n` +
+        `      return { action: "handled" };\n` +
+        `    }\n` +
         `    pendingContext = decision?.hookSpecificOutput?.additionalContext || null;\n` +
         `    return { action: "continue" };\n` +
         `  });\n\n` +
@@ -2259,10 +2296,10 @@ function installCursorHook() {
     replaceManaged("stop", ["backup-cursor"]);
     for (const event of ["postToolUse", "postToolUseFailure", "subagentStart", "subagentStop"])
         replaceManaged(event, ["observe-cursor"]);
-    // Cursor cannot inject dynamic context from beforeSubmitPrompt today.
-    // Remove older Codiedev discovery entries so prompts are not uploaded for
-    // a response the host will discard; preserve any third-party hooks.
-    replaceManaged("beforeSubmitPrompt", []);
+    // Stops a prompt with a key in it when the company turned that on (a quick
+    // local no-op otherwise). It also replaces older Codiedev discovery entries,
+    // so prompts are not uploaded for a response the host will discard.
+    replaceManaged("beforeSubmitPrompt", ["prompt-guard-cursor"]);
     fs.writeFileSync(CURSOR_HOOKS_PATH, JSON.stringify(hooksFile, null, 2), "utf8");
 }
 // GitHub Copilot reads every `$COPILOT_HOME/hooks/*.json`, so Codiedev owns
@@ -2358,6 +2395,7 @@ function ensureCursorCodiedevHooksInstalled() {
             ["postToolUseFailure", "observe-cursor"],
             ["subagentStart", "observe-cursor"],
             ["subagentStop", "observe-cursor"],
+            ["beforeSubmitPrompt", "prompt-guard-cursor"],
         ];
         const has = (eventName, subcommand) => {
             const entries = hooks[eventName];
@@ -2369,7 +2407,8 @@ function ensureCursorCodiedevHooksInstalled() {
             });
         };
         const promptEntries = hooks.beforeSubmitPrompt;
-        const hasStalePromptHook = Array.isArray(promptEntries) && promptEntries.some((entry) => (0, detection_1.isCodiedevHookCommand)(entry.command));
+        const hasStalePromptHook = Array.isArray(promptEntries) && promptEntries.some((entry) => (0, detection_1.isCodiedevHookCommand)(entry.command)
+            && !String(entry.command ?? "").trim().endsWith("prompt-guard-cursor"));
         if (!required.every(([eventName, subcommand]) => has(eventName, subcommand)) ||
             hasStalePromptHook) {
             installCursorHook();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codiedev",
-  "version": "0.9.89",
+  "version": "0.9.90",
   "description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness",
   "bin": {
     "codiedev": "dist/cli.js",