@quantiya/codevibe-claude-plugin 2.0.17 → 2.0.19

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/types.d.ts

@@ -32,6 +32,28 @@ export type PostDecisionAction = {
     kind: 'continuation_switch_declined';
     offer_id: string;
 };
+/** Strictly classified server-authored P16/P20 gate-resolution fact. */
+export interface DurableGateResolution {
+    eventId: string;
+    sessionId: string;
+    promptId: string;
+    decisionClaimId: string;
+    subjectKind: 'TASK' | 'TASK_GROUP';
+    subjectId: string;
+    decision: string;
+    label: string;
+    resolvedAt: string;
+    effectRecipe: Record<string, unknown>;
+    gateId?: string;
+    taskId?: string;
+    taskGroupId?: string;
+    groupGeneration?: number;
+    notesEncrypted?: {
+        ciphertextB64: string;
+        sessionId: string;
+        keyVersion: 1;
+    };
+}
 /**
  * CP-1.f execute-first (D5): does this `applyUserDecision` outcome mean the
  * task's workspace shadow must be DISCARDED?
@@ -369,6 +391,14 @@ export type ConversationEntry = {
         decisionDraft: string;
     } | {
         phase: 'submitting';
+    } | {
+        phase: 'confirming';
+        decisionAttemptId: string;
+        canonicalRequestHash: string;
+        decisionClaimId: string | null;
+    } | {
+        phase: 'claimed';
+        decisionClaimId: string | null;
     } | {
         phase: 'resolved';
         postAction: PostDecisionAction;
@@ -377,6 +407,10 @@ export type ConversationEntry = {
         phase: 'resolved';
         resolvedBy: 'server';
         serverDecision: string | null;
+    } | {
+        phase: 'resolved';
+        resolvedBy: 'durable';
+        resolution: DurableGateResolution;
     };
     reviewSummary?: ReviewSummaryPanelModel;
     queuedReviewSummaries?: Readonly<Record<string, ReviewSummaryPanelModel>>;
@@ -679,6 +713,12 @@ export interface OrchestrationState {
      * enum labels only — never decrypted payload content.
      */
     auditFlagIndex: AuditFlagIndex | null;
+    /** P16/P20 authoritative resolution union, keyed by retained promptId. */
+    gateResolutions: Map<string, DurableGateResolution>;
+    /** P16/P20 claim-time action fences, keyed by retained promptId. */
+    gateActionClaims: Map<string, string | null>;
+    /** True while prompt-action catch-up is not authoritative after a disconnect. */
+    gateActionRecoveryBlocked: boolean;
 }
 /**
  * One retained `/audit` listing row, keyed by its audit `entry_id` in
@@ -839,6 +879,13 @@ export type OrchestrationAction = {
 } | {
     type: 'GATE_PROMPT_SUBMIT_STARTED';
     promptEntryId: string;
+} | {
+    type: 'GATE_PROMPT_DECISION_FENCED';
+    promptEntryId: string;
+    gateId: string;
+    decisionAttemptId: string;
+    canonicalRequestHash: string;
+    decisionClaimId: string | null;
 } | {
     type: 'GATE_PROMPT_RESOLVED';
     promptEntryId: string;
@@ -854,6 +901,16 @@ export type OrchestrationAction = {
     promptEntryId: string;
     gateId: string;
     serverDecision: string | null;
+} | {
+    type: 'GATE_RESOLUTION_RECEIVED';
+    resolution: DurableGateResolution;
+} | {
+    type: 'GATE_PROMPT_ACTION_FENCED';
+    gateId: string;
+    decisionClaimId: string | null;
+} | {
+    type: 'GATE_ACTION_RECOVERY_CHANGED';
+    blocked: boolean;
 } | {
     type: 'SHELL_ADVISORY';
     text: string;

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/workspace-outcome.d.ts

@@ -0,0 +1,20 @@
+import type { Event } from '../types/events';
+export type WorkspaceOutcomeKind = 'applied' | 'not_applied' | 'discarded' | 'apply_failed' | 'kept' | 'reverted' | 'partially_reverted';
+export interface DurableWorkspaceOutcome {
+    eventId: string;
+    sessionId: string;
+    sessionGenerationId: string;
+    subjectKind: 'TASK' | 'TASK_GROUP';
+    subjectId: string;
+    groupGeneration?: number;
+    outcome: WorkspaceOutcomeKind;
+    message: string;
+    filesApplied?: number;
+    filesRetained?: number;
+    filesReverted?: number;
+    filesConflicted?: number;
+    timestamp: string;
+}
+export declare function deterministicWorkspaceOutcomeNonce(sessionId: string, subjectKind: 'task' | 'task_group', subjectId: string): string;
+/** Strictly classify a backend-attested, successfully decrypted outcome row. */
+export declare function classifyDurableWorkspaceOutcome(event: Event, displayedSessionId: string, decryptedMetadata: unknown, expectedSessionGenerationId?: string): DurableWorkspaceOutcome | null;

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/workspace-terminal-coordinator.d.ts

@@ -0,0 +1,114 @@
+import { type AppSyncClient } from '../appsync';
+import { type Session } from '../types';
+import { type EmitShellEventDeps } from './emit-shell-event';
+import type { DurableGateResolution } from './types';
+import { type WorkspaceOutcomeKind } from './workspace-outcome';
+export type TaskTerminalOperation = 'PROMOTE' | 'CANCEL' | 'ABORT';
+export type TaskTerminalOutcome = Extract<WorkspaceOutcomeKind, 'applied' | 'not_applied' | 'discarded' | 'apply_failed'>;
+export type GroupTerminalOperation = 'KEEP' | 'REVERT' | 'PROMOTE';
+export type GroupTerminalOutcome = Extract<WorkspaceOutcomeKind, 'applied' | 'apply_failed' | 'kept' | 'reverted' | 'partially_reverted'>;
+export interface GroupTerminalAuthority {
+    anchorId: string;
+    anchorTimestamp: string;
+    manifestHash: string;
+    memberCount: number;
+    operationHash: string;
+    /** Present when the server has already begun a PROMOTE replay. */
+    operationToken?: string;
+}
+export interface GroupTerminalReservation extends GroupTerminalAuthority {
+    /** Persisted locally before beginGroupPromotion; absent for KEEP/REVERT. */
+    operationToken?: string;
+}
+export interface GroupTerminalDetails {
+    filesApplied?: number;
+    filesRetained?: number;
+    filesReverted?: number;
+    filesConflicted?: number;
+}
+export interface WorkspaceOutcomeSink {
+    registerResolution(resolution: DurableGateResolution): Promise<void>;
+    hasTaskResolution(taskId: string): boolean;
+    hasPendingTask(taskId: string): Promise<boolean>;
+    reserveTask(taskId: string, operation: TaskTerminalOperation): Promise<void>;
+    completeTask(taskId: string, outcome: TaskTerminalOutcome, details?: {
+        filesApplied?: number;
+    }): Promise<void>;
+    reserveGroup(taskGroupId: string, groupGeneration: number, operation: GroupTerminalOperation, authority: GroupTerminalAuthority): Promise<GroupTerminalReservation>;
+    cancelGroupReservation(taskGroupId: string, groupGeneration: number, operation: GroupTerminalOperation, authority: GroupTerminalAuthority): Promise<void>;
+    prepareGroupOutcome(taskGroupId: string, outcome: GroupTerminalOutcome, details: GroupTerminalDetails): Promise<void>;
+    publishGroupOutcome(taskGroupId: string): Promise<void>;
+    completeGroup(taskGroupId: string, outcome: GroupTerminalOutcome, details: GroupTerminalDetails): Promise<void>;
+}
+/** Bootstrap bridge between the shell-owned coordinator and the team LE. */
+export interface WorkspaceOutcomeSinkTap {
+    sink?: WorkspaceOutcomeSink;
+}
+export interface WorkspaceTerminalCoordinatorOptions {
+    session: Session;
+    appsyncClient: Pick<AppSyncClient, 'createEvent'>;
+    getSessionKey: EmitShellEventDeps['getSessionKey'];
+    rootDir?: string;
+    now?: () => Date;
+    onSyncIssue?: (message: string) => void;
+}
+/**
+ * Crash-safe owner for the single-task terminal edge. The local receipt is the
+ * pre-effect capacity reservation; the outbox contains the exact encrypted and
+ * signed CreateEvent input captured before its first network attempt.
+ */
+export declare class WorkspaceTerminalCoordinator implements WorkspaceOutcomeSink {
+    private readonly session;
+    private readonly appsyncClient;
+    private readonly getSessionKey;
+    private readonly rootDir;
+    private readonly now;
+    private readonly onSyncIssue?;
+    private readonly resolutions;
+    private operationChain;
+    constructor(options: WorkspaceTerminalCoordinatorOptions);
+    private generation;
+    private intentRoot;
+    private outboxRoot;
+    private draftRoot;
+    private quarantineRoot;
+    private intentDir;
+    private outboxDir;
+    private draftDir;
+    private quarantineDir;
+    private intentPath;
+    private outboxPath;
+    private draftPath;
+    private serialize;
+    private readJson;
+    private listRecords;
+    private listGenerationDirectories;
+    private listRecordsAcrossGenerations;
+    private cleanTemporaryFiles;
+    private cleanTemporaryFilesAcrossGenerations;
+    private assertCapacity;
+    private chain;
+    registerResolution(resolution: DurableGateResolution): Promise<void>;
+    hasTaskResolution(taskId: string): boolean;
+    hasPendingTask(taskId: string): Promise<boolean>;
+    reserveTask(taskId: string, operation: TaskTerminalOperation): Promise<void>;
+    completeTask(taskId: string, outcome: TaskTerminalOutcome, details?: {
+        filesApplied?: number;
+    }): Promise<void>;
+    reserveGroup(taskGroupId: string, groupGeneration: number, operation: GroupTerminalOperation, authority: GroupTerminalAuthority): Promise<GroupTerminalReservation>;
+    cancelGroupReservation(taskGroupId: string, groupGeneration: number, operation: GroupTerminalOperation, authority: GroupTerminalAuthority): Promise<void>;
+    private groupTerminal;
+    prepareGroupOutcome(taskGroupId: string, outcome: GroupTerminalOutcome, details: GroupTerminalDetails): Promise<void>;
+    publishGroupOutcome(taskGroupId: string): Promise<void>;
+    completeGroup(taskGroupId: string, outcome: GroupTerminalOutcome, details: GroupTerminalDetails): Promise<void>;
+    private persistExactInput;
+    private outcomePayload;
+    private prepareExactInput;
+    private promoteDraftToOutbox;
+    private flushTerminalIntent;
+    private acknowledge;
+    private quarantine;
+    private sendOutbox;
+    /** Reconcile terminal receipts first, then replay exact encrypted bytes. */
+    replayPending(): Promise<void>;
+}

package/node_modules/@quantiya/codevibe-core/dist/types/events.d.ts

@@ -75,6 +75,9 @@ export interface Event {
     encryptionVersion?: number;
     writerAuthenticated?: boolean | null;
     writerEventNonce?: string | null;
+    writerEventKind?: 'WORKSPACE_OUTCOME' | null;
+    writerSessionGenerationId?: string | null;
+    emittedBy?: 'SYSTEM' | 'IMPLEMENTOR' | null;
 }
 export interface WriterEventAttestationInput {
     schema: 'codevibe.encrypted_desktop_event.writer.v1';
@@ -104,6 +107,10 @@ export interface CreateEventInput {
     expectedSessionKeyGen?: string;
     encryptionVersion?: number;
     writerAttestation?: WriterEventAttestationInput;
+    writerEventKind?: 'WORKSPACE_OUTCOME';
+    writerSessionGenerationId?: string;
+    writerOutcomeSubject?: Record<string, unknown>;
+    writerCausalPredecessor?: Record<string, unknown>;
 }
 /**
  * GraphQL input for updating event status

package/node_modules/@quantiya/codevibe-core/dist/types/session.d.ts

@@ -52,6 +52,8 @@ export interface Session {
     writerAttestationEligible?: boolean | null;
     /** SHA-256 of the raw 64-byte creator signing public key. */
     creatorSigningKeySha256?: string | null;
+    /** Opaque server generation bound into durable desktop outcome signatures. */
+    sessionGenerationId?: string | null;
     /**
      * Quorum 2.0 opt-in flag (2f.0.a.3). True routes the session to the
      * 2.0 orchestration flow once 2f.3 Lambda is live; null/false keeps

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.14",
+  "version": "2.0.16",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/node_modules/fs-ext/build/Makefile

@@ -332,7 +332,7 @@ endif
 
 quiet_cmd_regen_makefile = ACTION Regenerating $@
 cmd_regen_makefile = cd $(srcdir); /opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/gyp/gyp_main.py -fmake --ignore-environment "-Dlibrary=shared_library" "-Dvisibility=default" "-Dnode_root_dir=/Users/hendryyeh/Library/Caches/node-gyp/24.4.0" "-Dnode_gyp_dir=/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp" "-Dnode_lib_file=/Users/hendryyeh/Library/Caches/node-gyp/24.4.0/<(target_arch)/node.lib" "-Dmodule_root_dir=/Users/hendryyeh/Workspace/CodeVibe/codevibe-claude-plugin/node_modules/fs-ext" "-Dnode_engine=v8" "--depth=." "-Goutput_dir=." "--generator-output=build" -I/Users/hendryyeh/Workspace/CodeVibe/codevibe-claude-plugin/node_modules/fs-ext/build/config.gypi -I/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi -I/Users/hendryyeh/Library/Caches/node-gyp/24.4.0/include/node/common.gypi "--toplevel-dir=." binding.gyp
-Makefile: $(srcdir)/../../../../../Library/Caches/node-gyp/24.4.0/include/node/common.gypi $(srcdir)/../../../../../../../opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi $(srcdir)/build/config.gypi $(srcdir)/binding.gyp
+Makefile: $(srcdir)/build/config.gypi $(srcdir)/binding.gyp $(srcdir)/../../../../../../../opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi $(srcdir)/../../../../../Library/Caches/node-gyp/24.4.0/include/node/common.gypi
 	$(call do_cmd,regen_makefile)
 
 # "all" is a concatenation of the "all" targets from all the included

package/node_modules/fs-ext/build/config.gypi

@@ -489,7 +489,6 @@
     "nodedir": "/Users/hendryyeh/Library/Caches/node-gyp/24.4.0",
     "python": "/opt/homebrew/opt/python@3.14/bin/python3.14",
     "standalone_static_library": 1,
-    "audit": "",
     "global_prefix": "/opt/homebrew",
     "local_prefix": "/Users/hendryyeh/Workspace/CodeVibe/codevibe-claude-plugin",
     "globalconfig": "/opt/homebrew/etc/npmrc",
@@ -498,7 +497,6 @@
     "npm_version": "11.4.2",
     "node_gyp": "/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js",
     "cache": "/Users/hendryyeh/.npm",
-    "fund": "",
     "user_agent": "npm/11.4.2 node/v24.4.0 darwin arm64 workspaces/false",
     "prefix": "/opt/homebrew"
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-claude-plugin",
-  "version": "2.0.17",
+  "version": "2.0.19",
   "description": "Control Claude Code from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -47,7 +47,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "2.0.14",
+    "@quantiya/codevibe-core": "2.0.16",
     "@quantiya/quorum-core": "^1.0.1",
     "dotenv": "^16.6.1",
     "express": "^5.1.0",