@quantiya/codevibe-claude-plugin 2.0.21 → 2.0.23

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/quorum-loop.d.ts

@@ -16,7 +16,7 @@ import { captureWorkspaceRootAuthority } from '../local-executor/workspace-autho
 import { type TeamExecution } from '../local-executor/team-execution-flag';
 import { type RenderedConflict, type TrackIntentDiff } from '../local-executor/wb2-review-bundle';
 import { ReviewerRegistry } from '../reviewer/registry';
-import { type ReviewerFailureReason } from '../reviewer/provider';
+import { type ReviewerError, type ReviewerFailureReason } from '../reviewer/provider';
 import type { SubstrateHandle } from '../substrate/types';
 import type { VerdictClassifier } from '../reviewer/verdict-classifier';
 import type { AgentKind as ReviewerAgentKind, ReviewerRole, VerdictKind } from '../reviewer/types';
@@ -27,6 +27,13 @@ import type { PostDecisionAction, Tier } from './types';
 import type { ContinuationPacketWriter } from '../continuation/packet-writer';
 import type { ContinuationPacketReader } from '../continuation/packet-reader';
 import type { HandoffReason } from '../continuation/types';
+/**
+ * Project a `ReviewerError` into the variant-specific diagnostic fields worth
+ * logging without persisting reviewer-controlled bytes. The discriminator is
+ * logged separately. The exhaustive switch forces any future raw-carrying
+ * variant to choose an explicit safe projection.
+ */
+export declare function describeReviewerErrorDetail(detail: ReviewerError): Record<string, unknown>;
 /**
  * CP-1.f — the clean, user-facing one-liner for a synthesized ESCALATE verdict
  * whose origin is a reviewer subprocess failure. Built ONLY from the closed

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/reducer.d.ts

@@ -8,10 +8,9 @@ export declare const CONVERSATION_BUFFER_MAX = 500;
 export declare function reducer(state: OrchestrationState, action: OrchestrationAction): OrchestrationState;
 /**
  * P10 E3 r6/r8 — "is a single-implementor task actually running?" from the
- * TRUTHFUL `sessionTasks` lifecycle (the task-end closers terminalize it;
- * `runningTasks` never terminalizes in production and is kept ONLY for the
- * decision-spawned-a-task size heuristic). Shared by the `/status` running
- * line, `deriveCurrentTaskState` (the planner packet), and the reviewer-line
- * SET guard below.
+ * TRUTHFUL `sessionTasks` lifecycle. Shared by the `/status` running line,
+ * `deriveCurrentTaskState` (the planner packet), and the reviewer-line SET
+ * guard below. `runningTasks` is terminalized in parallel for its independent
+ * task-start size heuristic.
  */
 export declare function hasRunningSingleTask(state: OrchestrationState): boolean;

package/node_modules/@quantiya/codevibe-core/dist/reviewer/provider.d.ts

@@ -179,10 +179,10 @@ export type ReviewerError = {
     kind: 'spawn_failed';
     agent: AgentKind;
     /**
-     * Human-readable cause. **MAY carry raw stderr** — must stay in logs /
-     * audit only. NEVER promote this into the synthesized verdict wire
-     * `reasoning` (CP-1.f sanitization invariant). Use `failureReason` for
-     * the user-facing one-liner instead.
+     * Human-readable cause. **MAY carry raw stderr** — keep it transient and
+     * shape-project it before any durable log/audit. NEVER promote this into
+     * synthesized verdict wire `reasoning` (CP-1.f sanitization invariant).
+     * Use `failureReason` for the user-facing one-liner instead.
      */
     reason: string;
     /**
@@ -197,11 +197,11 @@ export type ReviewerError = {
     failureReason?: ReviewerFailureReason;
 } | {
     /** Reviewer returned but its output couldn't be parsed into a valid
-     *  verdict. Raw output is preserved for the audit log. */
+     *  verdict. Raw output remains transient for classification and is
+     *  shape-projected before any durable diagnostic. */
     kind: 'parse_failure';
     agent: AgentKind;
-    /** Raw output (truncated to a reasonable length by the caller if
-     *  needed). */
+    /** Raw output; consumers must never persist or surface its bytes. */
     raw_output: string;
 } | {
     /** Reviewer was cancelled by the engine before completing (e.g.,

package/node_modules/@quantiya/codevibe-core/dist/substrate/command-runner.d.ts

@@ -17,5 +17,6 @@ export declare class ChildProcessCommandRunner implements CommandRunner {
         env?: Readonly<Record<string, string>>;
         cwd?: string;
         cwdAuthority?: WorkspaceRootAuthority;
+        launchPathAuthorities?: readonly WorkspaceRootAuthority[];
     }): RunnerProc;
 }

package/node_modules/@quantiya/codevibe-core/dist/substrate/sandbox-exec.d.ts

@@ -91,8 +91,9 @@ homedir?: string,
  */
 auditDir?: string | null, 
 /**
- * Extra dirs that the agent may read/write. Used only for the mutable CLI
- * config/runtime dir; the broker-token helper stays in `extraReadDirs`.
+ * Extra dirs that the agent may read/write. Used for the mutable CLI
+ * config/runtime dir and the unique Claude scratch root; the broker-token
+ * helper stays in `extraReadDirs`.
  */
 extraWriteDirs?: readonly string[], 
 /**

package/node_modules/@quantiya/codevibe-core/dist/substrate/types.d.ts

@@ -92,6 +92,19 @@ export interface SubstrateSpec {
         /** Writable mount/grant point inside the sandbox. */
         sandboxDir: string;
     };
+    /**
+     * O5 — unique short writable Claude scratch root for A5. It is created by
+     * the host with mode 0700, granted as one exact subtree, and removed through
+     * identity-bound teardown. Docker does not need this extra mount/grant.
+     */
+    agentScratch?: {
+        /** Canonical host path used by the Seatbelt grant. */
+        hostDir: string;
+        /** Short path spelling exported as CLAUDE_CODE_TMPDIR. */
+        sandboxDir: string;
+        /** Exact scratch-root incarnation captured through its creation descriptor. */
+        authority: WorkspaceRootAuthority;
+    };
     /**
      * CP-7 W3 — Stage-2 r1 HIGH (A5 audit-readability). OPTIONAL, additive. The
      * RESOLVED per-task audit DIR (the sibling `.codevibe/audit/<group>/<track>/`
@@ -256,5 +269,12 @@ export interface CommandRunner {
         cwd?: string;
         /** Exact cwd incarnation held through native process creation. */
         cwdAuthority?: WorkspaceRootAuthority;
+        /**
+         * Additional directory incarnations that the trusted POSIX process host
+         * must authenticate synchronously at the final target-spawn boundary.
+         * These paths may be referenced by the child env/profile even though
+         * they are not its cwd (for example Claude's private scratch root).
+         */
+        launchPathAuthorities?: readonly WorkspaceRootAuthority[];
     }): RunnerProc;
 }

package/node_modules/@quantiya/codevibe-core/dist/substrate-launch/apikey-bootstrap.d.ts

@@ -1,4 +1,5 @@
 import type { VendorProvider } from "../credential-broker/types";
+import type { WorkspaceRootAuthority } from "../local-executor/workspace-authority";
 /** The fixed filenames inside the bootstrap dir (host + sandbox agree). */
 export declare const HELPER_SCRIPT_NAME = "broker-apikey-helper.sh";
 export declare const TOKEN_FILE_NAME = "broker-token";
@@ -49,6 +50,18 @@ export interface ApiKeyBootstrapInput {
     configDirEqualsHostDir?: boolean;
     /** Override the host root for the bootstrap dir (default os.tmpdir()). */
     hostRoot?: string;
+    /**
+     * A5/macOS only: parent for Claude's short, private per-seat scratch root.
+     * `engageSubstrate` passes `/tmp`, which is canonicalized before `mkdtemp`;
+     * the resulting `/private/tmp/cvXXXXXX` path remains under 30 bytes and
+     * prevents Claude's Bash child-process temp path from falling back to the
+     * shared `/tmp/claude-<uid>` namespace. Omitted for Docker/direct callers.
+     */
+    claudeScratchHostRoot?: string;
+    /** @internal deterministic race seam after mkdtemp identity capture. */
+    beforeClaudeScratchOpen?: (path: string) => Promise<void> | void;
+    /** @internal deterministic race seam before atomic scratch quarantine. */
+    beforeClaudeScratchCleanupCommit?: (path: string) => Promise<void> | void;
     /**
      * The host path of the agent's rw WORKDIR mount (the worktree). The token
      * file + helper MUST live OUTSIDE this dir — otherwise the broker token (and
@@ -78,6 +91,14 @@ export declare class ApiKeyBootstrap {
     readonly configSandboxDir: string;
     /** Host path of the token file (the LE rewrites this on rotation). */
     private readonly tokenFileHostPath;
+    /** Canonical host path of the unique Claude scratch root, if allocated. */
+    readonly claudeScratchHostDir: string | null;
+    /** Short in-sandbox spelling exported as CLAUDE_CODE_TMPDIR. */
+    readonly claudeScratchSandboxDir: string | null;
+    /** Creation identity used to refuse cleanup of a replaced path. */
+    private readonly claudeScratchIdentity;
+    /** Test-only pause seam retained with the task-owned scratch authority. */
+    private readonly beforeClaudeScratchCleanupCommit;
     private constructor();
     /**
      * Materialize the bootstrap: create the host dir (0700), write the token file
@@ -95,6 +116,12 @@ export declare class ApiKeyBootstrap {
         hostDir: string;
         sandboxDir: string;
     };
+    /** The unique writable Claude scratch grant, absent on Docker/Codex paths. */
+    get claudeScratchSpec(): {
+        hostDir: string;
+        sandboxDir: string;
+        authority: WorkspaceRootAuthority;
+    } | null;
     /**
      * REFRESH the broker token (rotation / on a broker 401). Atomically rewrites
      * the token file (write a temp + rename) so the agent never reads a partial
@@ -102,6 +129,10 @@ export declare class ApiKeyBootstrap {
      * the new value. The agent's mount is read-only, so ONLY the host can do this.
      */
     refresh(token: string): Promise<void>;
-    /** Remove the bootstrap dir (session teardown). Idempotent. */
+    /**
+     * Remove the bootstrap, config, and unique Claude scratch dirs. Scratch
+     * cleanup is identity-bound: a replaced pathname is retained and reported,
+     * never recursively removed as though it still belonged to this seat.
+     */
     destroy(): Promise<void>;
 }

package/node_modules/@quantiya/codevibe-core/dist/substrate-launch/engage-substrate.d.ts

@@ -76,6 +76,8 @@ export interface EngageSubstrateInput {
     tokenRefreshIntervalMs?: number;
     /** Bootstrap host-root override (tests). */
     bootstrapHostRoot?: string;
+    /** A5 Claude short-scratch parent override (tests; production is `/tmp`). */
+    claudeScratchHostRoot?: string;
     /** Safe locale source for the sanitized env (default: none). */
     localeSource?: Readonly<Record<string, string | undefined>>;
 }

package/node_modules/@quantiya/codevibe-core/dist/substrate-launch/sanitized-env.d.ts

@@ -42,6 +42,12 @@ export interface SanitizedEnvInput {
      * Required for the substrate path; the I1 allow-list still drops every cred.
      */
     sandboxBootstrapDir: string;
+    /**
+     * Optional Claude-only short private scratch root. A5 supplies a unique
+     * canonical `/private/tmp/cvXXXXXX` path; Docker keeps using its isolated
+     * config dir.
+     */
+    claudeScratchDir?: string;
     /**
      * A SAFE source for the hygiene values (LANG/TERM/…). Defaults to a minimal
      * fixed map. The LE may pass a curated subset of `process.env` for locale, but

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.17",
+  "version": "2.0.19",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/node_modules/fs-ext/build/Makefile

@@ -332,7 +332,7 @@ endif
 
 quiet_cmd_regen_makefile = ACTION Regenerating $@
 cmd_regen_makefile = cd $(srcdir); /opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/gyp/gyp_main.py -fmake --ignore-environment "-Dlibrary=shared_library" "-Dvisibility=default" "-Dnode_root_dir=/Users/hendryyeh/Library/Caches/node-gyp/24.4.0" "-Dnode_gyp_dir=/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp" "-Dnode_lib_file=/Users/hendryyeh/Library/Caches/node-gyp/24.4.0/<(target_arch)/node.lib" "-Dmodule_root_dir=/Users/hendryyeh/Workspace/CodeVibe/codevibe-claude-plugin/node_modules/fs-ext" "-Dnode_engine=v8" "--depth=." "-Goutput_dir=." "--generator-output=build" -I/Users/hendryyeh/Workspace/CodeVibe/codevibe-claude-plugin/node_modules/fs-ext/build/config.gypi -I/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi -I/Users/hendryyeh/Library/Caches/node-gyp/24.4.0/include/node/common.gypi "--toplevel-dir=." binding.gyp
-Makefile: $(srcdir)/build/config.gypi $(srcdir)/../../../../../Library/Caches/node-gyp/24.4.0/include/node/common.gypi $(srcdir)/binding.gyp $(srcdir)/../../../../../../../opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi
+Makefile: $(srcdir)/build/config.gypi $(srcdir)/../../../../../../../opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi $(srcdir)/../../../../../Library/Caches/node-gyp/24.4.0/include/node/common.gypi $(srcdir)/binding.gyp
 	$(call do_cmd,regen_makefile)
 
 # "all" is a concatenation of the "all" targets from all the included

package/node_modules/fs-ext/build/config.gypi

@@ -489,7 +489,6 @@
     "nodedir": "/Users/hendryyeh/Library/Caches/node-gyp/24.4.0",
     "python": "/opt/homebrew/opt/python@3.14/bin/python3.14",
     "standalone_static_library": 1,
-    "audit": "",
     "global_prefix": "/opt/homebrew",
     "local_prefix": "/Users/hendryyeh/Workspace/CodeVibe/codevibe-claude-plugin",
     "globalconfig": "/opt/homebrew/etc/npmrc",
@@ -498,7 +497,6 @@
     "npm_version": "11.4.2",
     "node_gyp": "/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/bin/node-gyp.js",
     "cache": "/Users/hendryyeh/.npm",
-    "fund": "",
     "user_agent": "npm/11.4.2 node/v24.4.0 darwin arm64 workspaces/false",
     "prefix": "/opt/homebrew"
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-claude-plugin",
-  "version": "2.0.21",
+  "version": "2.0.23",
   "description": "Control Claude Code from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -48,7 +48,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "2.0.17",
+    "@quantiya/codevibe-core": "2.0.19",
     "@quantiya/quorum-core": "^1.0.1",
     "dotenv": "^16.6.1",
     "express": "^5.1.0",