@quantiya/codevibe-claude-plugin 1.0.37 → 1.0.39

package/node_modules/@quantiya/codevibe-core/dist/auth/auth-telemetry.d.ts

@@ -1,15 +1,11 @@
 /**
  * Typed taxonomy of auth-flow failure reasons.
  *
- * Every value in THIS union is a sanitized enum literal — never a raw
- * error message, never a truncated user input, never any byte from
- * Cognito's response. Adding a new failure mode means extending this
- * union; the compiler then forces every emit site to either use a known
- * value or produce a type error.
- *
- * (Note: the `error_fragment` parameter on the auth_failed beacon DOES
- * carry redacted error material — see `sanitizeAuthErrorFragment`. The
- * `reason` taxonomy below remains the analytics-safe primary key.)
+ * Every value is a sanitized enum literal — never a raw error message,
+ * never a truncated user input, never any byte from Cognito's response.
+ * Adding a new failure mode means extending this union; the compiler
+ * then forces every emit site to either use a known value or produce
+ * a type error.
  *
  * Keep values snake_case to match GA4 custom-dimension conventions
  * used elsewhere in the codebase (`step`, `source`, `reason`).
@@ -33,20 +29,6 @@ export type AuthStage = 'server_start' | 'browser_open' | 'awaiting_callback' |
  * address.
  */
 export declare function fireAuthCompletedBeacon(userId: string): Promise<void>;
-/**
- * Bytes 0-99 of the sanitized fragment (GA4 dim: error_fragment).
- * See `sanitizeAuthErrorFragmentFull` for the redaction contract.
- */
-export declare function sanitizeAuthErrorFragment(msg: string): string;
-/**
- * Bytes 100-199 of the sanitized fragment (GA4 dim: error_fragment_2).
- * Returns empty string when the redacted message is ≤100 chars (the
- * typical short-error case), which is what we want — no
- * `error_fragment_2` param fires unless there's something past byte
- * 100 worth carrying. Works around GA4 Measurement Protocol's 100-char
- * per-param limit.
- */
-export declare function sanitizeAuthErrorFragmentTail(msg: string): string;
 /**
  * Fire the `auth_failed` failure beacon with a sanitized `reason`
  * literal. Optional `httpStatus` captures the numeric HTTP status
@@ -63,12 +45,9 @@ export declare function sanitizeAuthErrorFragmentTail(msg: string): string;
  * `reason: 'unknown'`. The outer `auth-cli` catch passes the first
  * portion of `error.message` here so the next analytics pass can
  * see what's hiding in `unknown` and we can ship a typed reason in
- * a follow-up. Sanitized inside via `sanitizeAuthErrorFragment` (head)
- * + `sanitizeAuthErrorFragmentTail` (tail) — ANSI stripped, $HOME /
- * USERPROFILE / `/Users/<name>/` / `/home/<name>/` / email substrings
- * redacted (Windows backslashes normalized first so `C:\Users\Alice\…`
- * matches the same path regex as POSIX form), control + non-ASCII
- * bytes dropped, then split into two GA4 dimensions to work around the
+ * a follow-up. Sanitized inside: ANSI escape sequences stripped,
+ * newlines/tabs/quotes/backslashes replaced with spaces, non-ASCII
+ * dropped, then split into two GA4 dimensions to work around the
  * Measurement Protocol 100-char per-param limit:
  *   - `error_fragment`   = bytes 0-99
  *   - `error_fragment_2` = bytes 100-199 (only set when input >100 chars)
@@ -91,3 +70,59 @@ export declare function markErrorBeaconed(err: Error, reason: AuthFailureReason)
 export declare function errorWasBeaconed(err: unknown): boolean;
 /** Retrieve the tagged reason from a previously-marked error, if any. */
 export declare function getErrorReason(err: unknown): AuthFailureReason | undefined;
+export type DeviceCountBucket = '0' | '1' | '2-5' | '6+';
+/**
+ * Bucket a raw device count into a coarse range to prevent device-count
+ * fingerprinting via GA4 client_id stickiness. The `'0'` bucket exists as
+ * a safe default for callers that may pass 0; no current emitter actually
+ * fires with count 0 in production paths.
+ */
+export declare function bucketDeviceCount(count: number): DeviceCountBucket;
+/**
+ * SHA-256-truncate a sessionId for cross-beacon correlation without leaking
+ * the raw UUID. 8 hex chars = 32 bits ⇒ no practical reverse lookup absent
+ * a GA4 + DDB join.
+ */
+export declare function hashSessionId(sessionId: string): string;
+/**
+ * Bug B per-device: fired inside `createSessionKey`'s per-device catch.
+ * `session_hash` is optional because keychain-manager intentionally does
+ * not know which session is being keyed — the per-session aggregate in
+ * `fireSessionEncryptionPartialSuccessBeacon` provides the correlation.
+ */
+export declare function fireSessionEncryptionDeviceSkippedBeacon(params: {
+    skipped_count_bucket: DeviceCountBucket;
+    session_hash?: string;
+}): Promise<void>;
+/**
+ * Bug B per-session: fired once per session creation when at least one
+ * device was skipped. Caller MUST gate on `skippedDeviceIds.length > 0`.
+ */
+export declare function fireSessionEncryptionPartialSuccessBeacon(params: {
+    session_hash: string;
+    encrypted_count_bucket: DeviceCountBucket;
+    skipped_count_bucket: DeviceCountBucket;
+}): Promise<void>;
+/**
+ * Bug A2: fired when `rekeySessionForNewDevices` grants ≥1 device on resume.
+ * Caller MUST gate on `grantedCount > 0`.
+ */
+export declare function fireSessionEncryptionCatchUpGrantBeacon(params: {
+    session_hash: string;
+    granted_count_bucket: DeviceCountBucket;
+}): Promise<void>;
+/** Bug A1: fired when we enter the self-rekey path (our deviceId missing). */
+export declare function fireSessionEncryptionSelfRekeyRequestBeacon(params: {
+    session_hash: string;
+    other_device_count_bucket: DeviceCountBucket;
+}): Promise<void>;
+/** Bug A1: fired when polling resolves with our entry + decrypt succeeds. */
+export declare function fireSessionEncryptionSelfRekeySuccessBeacon(params: {
+    session_hash: string;
+    attempt_count: number;
+}): Promise<void>;
+/** Bug A1: fired when polling exhausts maxAttempts without our entry. */
+export declare function fireSessionEncryptionSelfRekeyTimeoutBeacon(params: {
+    session_hash: string;
+    attempt_count: number;
+}): Promise<void>;

package/node_modules/@quantiya/codevibe-core/dist/index.d.ts

@@ -13,8 +13,4 @@ export { parseInteractivePrompt, normalizeSnapshot, } from './prompt-parser';
 export type { ParsedInteractivePrompt, PromptKind, InteractivePromptOption, } from './prompt-parser';
 export { resumeOrCreateSession, prepareSessionEncryption, rekeySessionForNewDevices, startDeviceKeyWatcher, registerDeviceEncryptionKey, } from './session';
 export type { ResumeOrCreateSessionInput, ResumeOrCreateSessionResult } from './session';
-export { detectInstalledAgents, pushDetectedAgents, applyPerSessionOrchestrationOverride, runOrchestrationCli, V1_ORCHESTRATION_PROMPT_KIND, V1_ORCHESTRATION_OPTIONS, mapOptionNumberToUserDecisionKind, mapOptionToUserDecisionKind, mapV1KindToWire, } from './orchestration';
-export type { DetectableAgent, V1OrchestrationOption, V1UserDecisionKind, } from './orchestration';
-export * as Reviewer from './reviewer';
-export * as AuditKeys from './audit-keys';
 export * from './types';