@quantiya/codevibe-claude-plugin 2.0.14 → 2.0.16

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/cli.js

@@ -3442,7 +3442,7 @@ var AppSyncGraphQLError = class extends Error {
 function isRetiredSessionError(error) {
   return (error instanceof Error ? error.message : String(error)).includes("RETIRED_SESSION_CANNOT_REACTIVATE");
 }
-function isSubmitImplementorUsageSchemaMismatch(error) {
+function isSubmitImplementorAdditiveSchemaMismatch(error) {
   return error instanceof AppSyncGraphQLError ? error.message.includes("field that is not defined for input object type 'SubmitImplementorOutputInput'") : !1;
 }
 var RECONNECT_CONFIG = {
@@ -4759,15 +4759,23 @@ var AppSyncClient = class _AppSyncClient {
         sessionId: input.sessionId,
         roundNumber: input.roundNumber,
         encProposal,
-        ...input.usage !== void 0 ? { usage: input.usage } : {}
+        ...input.usage !== void 0 ? { usage: input.usage } : {},
+        // Presence is the P24 capability handshake. Updated clients always
+        // send false or true; legacy clients omit the field entirely.
+        reviewScopeReset: input.reviewScopeReset ?? !1
       }
     }, response;
     try {
       response = await this.graphqlRequest(mutations.submitImplementorOutput, variables);
     } catch (err) {
-      if (input.usage === void 0 || !isSubmitImplementorUsageSchemaMismatch(err))
+      if (!isSubmitImplementorAdditiveSchemaMismatch(err))
         throw err;
-      logger.warn("[AppSyncClient] submitImplementorOutput usage field rejected by backend schema; retrying without usage", {
+      if (input.reviewScopeReset === !0)
+        throw logger.warn("[AppSyncClient] explicit review-scope reset rejected by old backend schema; failing closed", {
+          gateId: input.gateId,
+          taskId: input.taskId
+        }), err;
+      logger.warn("[AppSyncClient] submitImplementorOutput additive fields rejected by backend schema; retrying legacy input", {
         gateId: input.gateId,
         taskId: input.taskId,
         reason: err instanceof Error ? err.message : String(err)
@@ -4849,7 +4857,8 @@ var AppSyncClient = class _AppSyncClient {
       gateId: parsed.gateId,
       seatId: parsed.seatId,
       role: parsed.role,
-      prompt
+      prompt,
+      reviewScope: parsed.reviewScope
     };
   }
   /**
@@ -9524,6 +9533,12 @@ var CATALOG = [
       );
     }
   },
+  {
+    name: "/review-reset",
+    blurb: "Start a fresh comprehensive baseline on the next review round (Pro/Max).",
+    minTier: "PRO",
+    handler: () => staticOutput("/review-reset", "PENDING \u2014 entrypoint arms comprehensive review")
+  },
   {
     name: "/task",
     blurb: "Run an implementation request directly, skipping planning (Pro/Max).",
@@ -46803,6 +46818,130 @@ async function runReviewer(opts) {
   });
 }
 
+// src/reviewer/round-scope.ts
+var REVIEW_SCOPE_ATTESTATION_INVALID = "review_scope_attestation_invalid", SCOPE_TAG_PREFIX = /^\[(?:baseline|revision|regression|late-preexisting|prior:[^\]\s]+)\](?:\s|$)/i;
+function parseOrigin(change) {
+  let trimmed = change.trim(), match = /^\[(baseline|revision|regression|late-preexisting|prior:([^\]\s]+))\]\s+([\s\S]+)$/i.exec(
+    trimmed
+  );
+  if (!match)
+    return trimmed === "" || trimmed.startsWith("[") ? { kind: "invalid" } : { kind: "untagged", text: trimmed };
+  if (match[3].trim() === "") return { kind: "invalid" };
+  let tag = match[1].toLowerCase(), text2 = match[3].trim();
+  return SCOPE_TAG_PREFIX.test(text2) ? { kind: "invalid" } : tag === "late-preexisting" ? { kind: "late", text: text2 } : tag.startsWith("prior:") ? {
+    kind: "blocking",
+    origin: "prior",
+    priorFindingId: match[2] ?? null,
+    text: text2
+  } : {
+    kind: "blocking",
+    origin: tag,
+    priorFindingId: null,
+    text: text2
+  };
+}
+function originAllowed(parsed, context) {
+  return context.mode === "comprehensive" ? parsed.origin === "baseline" : parsed.origin === "baseline" ? !1 : parsed.origin !== "prior" ? !0 : context.prior_findings.some((finding) => finding.finding_id === parsed.priorFindingId);
+}
+function scopeIdentity(context) {
+  let { prior_findings: _priorFindings, ...identity } = context;
+  return identity;
+}
+function enforceReviewRoundScope(verdict, context) {
+  if (context.mode === "delta" && verdict.verdict === "REJECT")
+    return {
+      ...verdict,
+      verdict: "ESCALATE",
+      reasoning: REVIEW_SCOPE_ATTESTATION_INVALID,
+      suggested_changes: [],
+      residual_observations: [...verdict.residual_observations, verdict.reasoning],
+      review_scope: {
+        context: scopeIdentity(context),
+        blocking_findings: [],
+        late_preexisting_findings: []
+      }
+    };
+  if (verdict.verdict !== "REVISE")
+    return {
+      ...verdict,
+      review_scope: {
+        context: scopeIdentity(context),
+        blocking_findings: [],
+        late_preexisting_findings: []
+      }
+    };
+  let blockingChanges = [], blockingFindings = [], lateFindings = [], invalid = !1;
+  for (let change of verdict.suggested_changes) {
+    let parsed = parseOrigin(change);
+    if (parsed.kind === "invalid") {
+      invalid = !0;
+      continue;
+    }
+    if (parsed.kind === "late") {
+      if (context.mode === "comprehensive") {
+        invalid = !0;
+        continue;
+      }
+      lateFindings.push(parsed.text);
+      continue;
+    }
+    if (parsed.kind === "untagged") {
+      if (context.mode === "comprehensive") {
+        let suggestionIndex2 = blockingChanges.length;
+        blockingChanges.push(parsed.text), blockingFindings.push({
+          suggestion_index: suggestionIndex2,
+          origin: "baseline",
+          prior_finding_id: null
+        });
+      } else
+        lateFindings.push(parsed.text);
+      continue;
+    }
+    if (!originAllowed(parsed, context)) {
+      if (context.mode === "delta" && parsed.origin === "prior") {
+        lateFindings.push(parsed.text);
+        continue;
+      }
+      invalid = !0;
+      continue;
+    }
+    let suggestionIndex = blockingChanges.length;
+    blockingChanges.push(parsed.text), blockingFindings.push({
+      suggestion_index: suggestionIndex,
+      origin: parsed.origin,
+      prior_finding_id: parsed.priorFindingId
+    });
+  }
+  let residual = [...verdict.residual_observations, ...lateFindings], reviewScope = {
+    context: scopeIdentity(context),
+    blocking_findings: blockingFindings,
+    late_preexisting_findings: lateFindings
+  };
+  return invalid ? {
+    ...verdict,
+    verdict: "ESCALATE",
+    reasoning: REVIEW_SCOPE_ATTESTATION_INVALID,
+    suggested_changes: [],
+    residual_observations: [...residual, ...verdict.suggested_changes],
+    review_scope: {
+      context: scopeIdentity(context),
+      blocking_findings: [],
+      late_preexisting_findings: lateFindings
+    }
+  } : blockingChanges.length === 0 ? {
+    ...verdict,
+    verdict: "APPROVE",
+    suggested_changes: [],
+    residual_observations: residual,
+    review_scope: reviewScope
+  } : {
+    ...verdict,
+    suggested_changes: blockingChanges,
+    residual_observations: residual,
+    review_scope: reviewScope
+  };
+}
+
 // src/reviewer/provider.ts
 var ReviewerErrorClass = class _ReviewerErrorClass extends Error {
   constructor(detail) {
@@ -47638,6 +47777,10 @@ var QuorumLoop = class _QuorumLoop {
   constructor(deps) {
     /** The active task this desktop is driving (set at start_task). */
     this.activeTaskId = null;
+    /** Tasks whose next automatic revise round must start a fresh review baseline. */
+    this.reviewScopeResetTasks = /* @__PURE__ */ new Set();
+    /** Non-terminal tasks for which `/review-reset` may arm the next revise round. */
+    this.reviewScopeResetEligibleTasks = /* @__PURE__ */ new Set();
     // [live task status timer — TUI-LIVE-TASK-STATUS-DESIGN.md §3] Per-TASK monotonic
     // epoch: bumped once per `startTask` and recorded per taskId. Every progress emit
     // stamps `epoch: originEpoch` resolved from its OWN task's id (never `taskEpoch`
@@ -48574,6 +48717,10 @@ var QuorumLoop = class _QuorumLoop {
   get activeTask() {
     return this.activeTaskId;
   }
+  /** Arm an explicit, one-shot comprehensive baseline for the active task. */
+  requestReviewScopeReset() {
+    return !this.activeTaskId || !this.reviewScopeResetEligibleTasks.has(this.activeTaskId) ? !1 : (this.reviewScopeResetTasks.add(this.activeTaskId), !0);
+  }
   /**
    * Audited-path fix (Fix 5) — the host's detected implementor agents
    * (UPPERCASE `AgentKind`), as threaded into the loop at construction. Used by
@@ -48773,7 +48920,7 @@ var QuorumLoop = class _QuorumLoop {
         err: err.message
       }), null;
     }
-    this.startTaskInFlight = !1, logger.info("[QuorumLoop] startTask succeeded \u2014 draining buffered GATE_DISPATCH (if any) then awaiting more", {
+    this.startTaskInFlight = !1, this.reviewScopeResetEligibleTasks.add(taskId), logger.info("[QuorumLoop] startTask succeeded \u2014 draining buffered GATE_DISPATCH (if any) then awaiting more", {
       taskId,
       workflowState,
       buffered: this.pendingGateDispatches.length
@@ -48839,7 +48986,7 @@ var QuorumLoop = class _QuorumLoop {
       return;
     }
     let taskId = this.activeTaskId, brief = this.activeBrief;
-    await this.replaceShadowForRound0(taskId), await this.runImplementorRound({
+    await this.replaceShadowForRound0(taskId), this.reviewScopeResetEligibleTasks.add(taskId), await this.runImplementorRound({
       taskId,
       gateId: payload.gateRunId,
       roundNumber: 0,
@@ -49224,7 +49371,7 @@ var QuorumLoop = class _QuorumLoop {
     let stale = this.shadowsByTask.get(taskId);
     stale && (await stale.assertCanDiscard(), logger.info("[QuorumLoop] replacing a stale shadow for a fresh round-0 dispatch (restart)", {
       taskId
-    }), await stale.discard(), this.shadowsByTask.get(taskId) === stale && this.shadowsByTask.delete(taskId), this.userNotesByTask.delete(taskId), this.roundHistoryByTask.delete(taskId), this.rationaleByTask.delete(taskId), this.reviewedSnapshotByTask.delete(taskId));
+    }), await stale.discard(), this.shadowsByTask.get(taskId) === stale && this.shadowsByTask.delete(taskId), this.userNotesByTask.delete(taskId), this.reviewScopeResetTasks.delete(taskId), this.roundHistoryByTask.delete(taskId), this.rationaleByTask.delete(taskId), this.reviewedSnapshotByTask.delete(taskId));
   }
   /**
    * CP-14 P1 — the team execution model this session SIGNALS on
@@ -49306,7 +49453,7 @@ var QuorumLoop = class _QuorumLoop {
       return;
     }
     this.inFlightImplementorGates.add(gateId), this.taskByGateId.set(gateId, args.taskId), args.teamAuthority && this.teamAuthorityByGateId.set(gateId, args.teamAuthority), this.roundByGateId.set(gateId, args.roundNumber);
-    let originEpoch = this.originEpochFor(args.taskId), tickTimer = null, roundActive = !0, clearTick = () => {
+    let originEpoch = this.originEpochFor(args.taskId), tickTimer = null, roundActive = !0, submissionStarted = !1, clearTick = () => {
       roundActive = !1, tickTimer && (clearInterval(tickTimer), tickTimer = null);
     }, roundBriefForSpawn = args.brief, copiedForSpawn = [];
     try {
@@ -49752,16 +49899,17 @@ var QuorumLoop = class _QuorumLoop {
       this.emitProgressForTask(args.taskId, originEpoch, {
         phase: "submitting_diff",
         round: args.roundNumber
-      });
+      }), submissionStarted = !0;
       let result = await this.submitImplementorOutputWithRetry({
         taskId: args.taskId,
         gateId,
         roundNumber: args.roundNumber,
         rawOutput,
         usage: implementorUsage,
-        sessionKey: args.sessionKey
+        sessionKey: args.sessionKey,
+        reviewScopeReset: args.reviewScopeReset
       });
-      if (this.teamRunIsHalted(args.teamAuthority)) return;
+      if (args.reviewScopeReset && this.reviewScopeResetTasks.delete(args.taskId), this.teamRunIsHalted(args.teamAuthority)) return;
       if (this.submittedOutputGates.add(gateId), result && (result.workflowState === "halted" || result.workflowState === "idle")) {
         let crashedEmpty = files.length === 0 && exit.exitCode !== 0, reason = files.length === 0 ? crashedEmpty ? "The coding agent exited with an error before making any changes \u2014 nothing to review. Re-run the task; if this repeats, check the desktop log." : "The implementor produced no changes \u2014 nothing to review." : "The task was halted before review (no reviewer quorum ran).";
         (crashedEmpty ? logger.warn.bind(logger) : logger.info.bind(logger))("[QuorumLoop] execute-first born-halt surfaced synchronously (#EF-1)", {
@@ -49793,7 +49941,11 @@ var QuorumLoop = class _QuorumLoop {
       this.surfaceHalt(`The task could not proceed \u2014 ${reason}.`), this.emitProgress(
         { phase: "round_failed", round: args.roundNumber, reason, taskId: args.taskId },
         originEpoch
-      ), await this.discardShadow(args.taskId);
+      );
+      let reviseFeedbackId = args.reviseFeedbackId, preserveResetForRetry = submissionStarted && args.reviewScopeReset === !0 && reviseFeedbackId !== void 0 && this.reviewScopeResetTasks.has(args.taskId);
+      preserveResetForRetry && this.seenReviseFeedbackIds.delete(reviseFeedbackId), await this.discardShadow(args.taskId, void 0, {
+        preserveReviseContext: preserveResetForRetry
+      });
     } finally {
       clearTick(), this.inFlightImplementorGates.delete(gateId);
       let current = this.activeImplementorByTask.get(args.taskId);
@@ -50231,6 +50383,7 @@ var QuorumLoop = class _QuorumLoop {
       }
       return;
     }
+    terminalDiscard && this.reviewScopeResetEligibleTasks.delete(taskId);
     let shadow = expected ?? mapped;
     if (shadow)
       try {
@@ -50242,7 +50395,7 @@ var QuorumLoop = class _QuorumLoop {
         });
         return;
       }
-    if (opts?.preserveReviseContext || (this.userNotesByTask.delete(taskId), this.roundHistoryByTask.delete(taskId), this.rationaleByTask.delete(taskId), appendContextItem(this.deps.session.sessionId, {
+    if (opts?.preserveReviseContext || (this.userNotesByTask.delete(taskId), this.reviewScopeResetTasks.delete(taskId), this.reviewScopeResetEligibleTasks.delete(taskId), this.roundHistoryByTask.delete(taskId), this.rationaleByTask.delete(taskId), appendContextItem(this.deps.session.sessionId, {
       kind: "verdict",
       author: { role: "engine" },
       sensitivity: "user",
@@ -50309,7 +50462,7 @@ var QuorumLoop = class _QuorumLoop {
   async promoteShadowLockedInner(taskId, originEpoch) {
     let teamAuthority = this.teamAuthorityForTask(taskId);
     if (this.teamRunIsHalted(teamAuthority)) return;
-    this.userNotesByTask.delete(taskId), this.roundHistoryByTask.delete(taskId), this.rationaleByTask.delete(taskId);
+    this.userNotesByTask.delete(taskId), this.reviewScopeResetTasks.delete(taskId), this.reviewScopeResetEligibleTasks.delete(taskId), this.roundHistoryByTask.delete(taskId), this.rationaleByTask.delete(taskId);
     let shadow = this.shadowsByTask.get(taskId);
     if (!shadow) {
       logger.info("[QuorumLoop] promote no-op \u2014 no in-memory shadow for task", { taskId });
@@ -50725,7 +50878,8 @@ var QuorumLoop = class _QuorumLoop {
             sessionId: this.deps.session.sessionId,
             roundNumber: args.roundNumber,
             rawOutput: args.rawOutput,
-            usage: args.usage
+            usage: args.usage,
+            reviewScopeReset: args.reviewScopeReset
           },
           args.sessionKey
         );
@@ -50808,14 +50962,15 @@ var QuorumLoop = class _QuorumLoop {
         }), await this.submitVerdict(args, this.synthesizeEscalate(args, DESKTOP_DISPATCH_ESCALATE_REASONING), null);
         return;
       }
-      let promptText = null, lastErr = null;
+      let promptText = null, reviewScope = null, lastErr = null;
       for (let attempt = 0; attempt < PROMPT_FETCH_MAX_ATTEMPTS; attempt++)
         try {
-          promptText = (await this.deps.appsyncClient.getReviewerPrompt(
+          let res = await this.deps.appsyncClient.getReviewerPrompt(
             args.gateId,
             args.seatId,
             sessionKey
-          )).prompt;
+          );
+          promptText = res.prompt, reviewScope = res.reviewScope ?? null;
           break;
         } catch (err) {
           if (lastErr = err, !isNotFoundError(lastErr) || attempt === PROMPT_FETCH_MAX_ATTEMPTS - 1)
@@ -50916,7 +51071,7 @@ var QuorumLoop = class _QuorumLoop {
         await seatSubstrate.teardown().catch(() => {
         });
       }
-      await this.submitVerdict(args, verdict, sessionKey);
+      reviewScope !== null && (verdict = enforceReviewRoundScope(verdict, reviewScope)), await this.submitVerdict(args, verdict, sessionKey);
     } catch (err) {
       logger.warn("[QuorumLoop] spawnOneSeat failed \u2014 dropped", {
         key,
@@ -52508,7 +52663,9 @@ var QuorumLoop = class _QuorumLoop {
       phase: "revise_round",
       round: payload.nextRound,
       feedbackSummary: `addressing ${findingCount} ${findingCount === 1 ? "finding" : "findings"}`
-    }), await this.runImplementorRound({
+    });
+    let reviewScopeReset = this.reviewScopeResetTasks.has(taskId);
+    await this.runImplementorRound({
       taskId,
       gateId: payload.nextGateId,
       roundNumber: payload.nextRound,
@@ -52517,6 +52674,8 @@ var QuorumLoop = class _QuorumLoop {
       sessionKey,
       ...teamAuthority ? { teamAuthority } : {},
       ...priorRationale ? { priorRationale } : {},
+      ...reviewScopeReset ? { reviewScopeReset: !0 } : {},
+      reviseFeedbackId: payload.reviseFeedbackId,
       ...trackEntry ? {
         validateDiffScope: {
           writePaths: trackEntry.writePaths,
@@ -53111,7 +53270,7 @@ var QuorumLoop = class _QuorumLoop {
   }
   /** @internal — test seam to set the active task without start_task. */
   _setActiveTaskForTests(taskId, brief) {
-    this.activeTaskId = taskId, brief !== void 0 && (this.activeBrief = brief);
+    this.activeTaskId = taskId, this.reviewScopeResetEligibleTasks.add(taskId), brief !== void 0 && (this.activeBrief = brief);
   }
   /** @internal — read a task's accumulated binding user notes. */
   _userNotesForTests(taskId) {
@@ -57495,6 +57654,8 @@ async function handleShellUserInput(deps) {
           }
         }), output.output = "") : output.output = loaded.message;
       }
+    else if (output.command === "/review-reset" && !output.sideEffect && output.output === "PENDING \u2014 entrypoint arms comprehensive review")
+      args.quorumLoop ? args.quorumLoop.requestReviewScopeReset() ? output.output = "The next revise round will start a fresh comprehensive review baseline." : output.output = "/review-reset requires an active task. Start a task before requesting a reset." : output.output = "/review-reset requires an orchestration session with a running loop (Pro/Max). It is unavailable in this session.";
     else if (output.command === "/task" && !output.sideEffect && output.output === "PENDING \u2014 entrypoint drives startTask")
       if (!args.quorumLoop)
         output.output = "/task requires an orchestration session with a running loop (Pro/Max). It is unavailable in this session.";

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/quorum-loop.d.ts

@@ -554,6 +554,10 @@ export declare class QuorumLoop {
     private readonly sleep;
     /** The active task this desktop is driving (set at start_task). */
     private activeTaskId;
+    /** Tasks whose next automatic revise round must start a fresh review baseline. */
+    private readonly reviewScopeResetTasks;
+    /** Non-terminal tasks for which `/review-reset` may arm the next revise round. */
+    private readonly reviewScopeResetEligibleTasks;
     private taskEpoch;
     private readonly epochByTaskId;
     private readonly tokensByTaskId;
@@ -1144,6 +1148,8 @@ export declare class QuorumLoop {
     constructor(deps: QuorumLoopDeps);
     /** The current active task id (for the recovery poll). */
     get activeTask(): string | null;
+    /** Arm an explicit, one-shot comprehensive baseline for the active task. */
+    requestReviewScopeReset(): boolean;
     /**
      * Audited-path fix (Fix 5) — the host's detected implementor agents
      * (UPPERCASE `AgentKind`), as threaded into the loop at construction. Used by
@@ -1443,6 +1449,10 @@ export declare class QuorumLoop {
             round: number;
             text: string;
         };
+        /** Explicitly start a new comprehensive reviewer baseline. */
+        reviewScopeReset?: boolean;
+        /** Deterministic producer identity retained only so a failed revise can be retried. */
+        reviseFeedbackId?: string;
     }): Promise<void>;
     private runImplementorRoundOwned;
     /**

package/node_modules/@quantiya/codevibe-core/dist/reviewer/__tests__/round-scope.test.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@quantiya/codevibe-core/dist/reviewer/index.d.ts

@@ -1,4 +1,5 @@
 export type { AgentKind, ReviewerRole, ReviewerVerdict, VerdictId, VerdictKind, } from './types.js';
+export { enforceReviewRoundScope, REVIEW_SCOPE_ATTESTATION_INVALID } from './round-scope.js';
 export type { ReviewerError, ReviewerProvider, ReviewerSpec, } from './provider.js';
 export { ReviewerErrorClass } from './provider.js';
 export type { ParseResult, ParsedVerdict, VerdictParseError, } from './output-parser.js';

package/node_modules/@quantiya/codevibe-core/dist/reviewer/round-scope.d.ts

@@ -0,0 +1,9 @@
+import type { ReviewerVerdict, ReviewScopeContext } from './types';
+export declare const REVIEW_SCOPE_ATTESTATION_INVALID = "review_scope_attestation_invalid";
+/**
+ * Bind a reviewer verdict to the server-authored round context. Invalid or
+ * unscoped blocking findings become a fail-closed ESCALATE. Properly declared
+ * late pre-existing findings remain visible as residual observations and can
+ * never trigger another revision.
+ */
+export declare function enforceReviewRoundScope(verdict: ReviewerVerdict, context: ReviewScopeContext): ReviewerVerdict;

package/node_modules/@quantiya/codevibe-core/dist/reviewer/types.d.ts

@@ -50,6 +50,34 @@ export type VerdictKind = 'APPROVE' | 'REJECT' | 'REVISE' | 'ESCALATE';
  * UUID string, no envelope.
  */
 export type VerdictId = string;
+export type ReviewScopeMode = 'comprehensive' | 'delta';
+export type ReviewScopeResetReason = 'initial' | 'explicit' | 'seat_baseline';
+export type ReviewFindingOrigin = 'baseline' | 'prior' | 'revision' | 'regression';
+export interface ReviewScopePriorFinding {
+    finding_id: string;
+    text: string;
+}
+export interface ReviewScopeContext {
+    schema_version: number;
+    mode: ReviewScopeMode;
+    reset_reason: ReviewScopeResetReason | null;
+    candidate_sha256: string;
+    prior_candidate_sha256: string | null;
+    prior_gate_id: string | null;
+    prior_verdict_id: string | null;
+    prior_findings: ReviewScopePriorFinding[];
+}
+export type ReviewScopeIdentity = Omit<ReviewScopeContext, 'prior_findings'>;
+export interface ReviewBlockingFinding {
+    suggestion_index: number;
+    origin: ReviewFindingOrigin;
+    prior_finding_id: string | null;
+}
+export interface ReviewScopeAttestation {
+    context: ReviewScopeIdentity;
+    blocking_findings: ReviewBlockingFinding[];
+    late_preexisting_findings: string[];
+}
 /**
  * One reviewer's verdict at one gate. Records reasoning plus perf/cost
  * metadata for telemetry (review latency, token cost per task, etc.).
@@ -104,4 +132,6 @@ export interface ReviewerVerdict {
     submitted_at: string;
     /** Canonical input/output/cache/elapsed usage snapshot. Additive post-launch. */
     usage?: InvocationUsageSnapshot;
+    /** P24 server-bound review scope and finding provenance. Append-only. */
+    review_scope?: ReviewScopeAttestation | null;
 }

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.12",
+  "version": "2.0.14",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/node_modules/fs-ext/build/Makefile

@@ -332,7 +332,7 @@ endif
 
 quiet_cmd_regen_makefile = ACTION Regenerating $@
 cmd_regen_makefile = cd $(srcdir); /opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/gyp/gyp_main.py -fmake --ignore-environment "-Dlibrary=shared_library" "-Dvisibility=default" "-Dnode_root_dir=/Users/hendryyeh/Library/Caches/node-gyp/24.4.0" "-Dnode_gyp_dir=/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp" "-Dnode_lib_file=/Users/hendryyeh/Library/Caches/node-gyp/24.4.0/<(target_arch)/node.lib" "-Dmodule_root_dir=/Users/hendryyeh/Workspace/CodeVibe/codevibe-claude-plugin/node_modules/fs-ext" "-Dnode_engine=v8" "--depth=." "-Goutput_dir=." "--generator-output=build" -I/Users/hendryyeh/Workspace/CodeVibe/codevibe-claude-plugin/node_modules/fs-ext/build/config.gypi -I/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi -I/Users/hendryyeh/Library/Caches/node-gyp/24.4.0/include/node/common.gypi "--toplevel-dir=." binding.gyp
-Makefile: $(srcdir)/../../../../../../../opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi $(srcdir)/build/config.gypi $(srcdir)/binding.gyp $(srcdir)/../../../../../Library/Caches/node-gyp/24.4.0/include/node/common.gypi
+Makefile: $(srcdir)/../../../../../../../opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi $(srcdir)/build/config.gypi $(srcdir)/../../../../../Library/Caches/node-gyp/24.4.0/include/node/common.gypi $(srcdir)/binding.gyp
 	$(call do_cmd,regen_makefile)
 
 # "all" is a concatenation of the "all" targets from all the included

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-claude-plugin",
-  "version": "2.0.14",
+  "version": "2.0.16",
   "description": "Control Claude Code from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -47,7 +47,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "2.0.12",
+    "@quantiya/codevibe-core": "2.0.14",
     "@quantiya/quorum-core": "^1.0.1",
     "dotenv": "^16.6.1",
     "express": "^5.1.0",