@quantiya/codevibe-claude-plugin 2.0.25 → 2.0.26

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/flag-command.d.ts

@@ -9,7 +9,7 @@ import type { AuditFlagIndex } from './types';
  * Shape-only: coordinates + wire kind + the precomputed flaggable bit; the
  * decrypted payload never leaves the render.
  */
-export declare function buildAuditFlagIndex(taskId: string, model: AuditBrowserModel): AuditFlagIndex;
+export declare function buildAuditFlagIndex(taskId: string, model: AuditBrowserModel, sessionId?: string): AuditFlagIndex;
 /**
  * The minimal AppSync surface `/flag` needs — the existing
  * `recordExecutionEvent` Class-A method (D4: the full plumbing below it
@@ -37,6 +37,9 @@ export interface RunFlagCommandDeps {
 export type RunFlagCommandResult = {
     kind: 'no_index';
     line: string;
+} | {
+    kind: 'cross_session_unsupported';
+    line: string;
 } | {
     kind: 'unknown_entry';
     line: string;

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/index.d.ts

@@ -234,7 +234,7 @@ export { CONTEXT_SESSION_PSEUDO_TASK_NAMESPACE, deriveSessionPseudoTaskId, audit
 export { configureContextItemsHostedSync, wakeContextItemsHostedSync, drainContextItemsHostedSync, clearContextItemsHostedSync, contextItemsHostedSyncStatePath, type ContextItemsHostedSyncDeps, } from './context-items-hosted-sync';
 export { compactSessionContext, maybeFireCompactionSafetyValve, rehydrateSessionContext, renderRehydratedSessionContext, distillItems, projectDistilledForRole, loadCompactionCache, compactionCachePath, onTaskBoundary, gcContextItemLogs, scheduleContextItemsGc, COMPACTION_SAFETY_VALVE_TAIL_BYTES, COMPACTION_KEEP_HOT_RECENT_ITEMS, CONTEXT_ITEMS_RETENTION_MS, SESSION_CONTEXT_SECTION_MAX_CHARS, type DistilledFact, type DistilledTaskSummary, type SessionCompactionCache, type CompactionResult, type RehydratedSessionContext, } from './context-compaction';
 export { routeSlashCommand, applySlashOutput, type SlashOutput, type ShellAction, } from './slash-router';
-export { buildAuditBrowserModel, routeAuditEntry, auditKindLabel, auditKindCopy, renderAuditBrowserText, renderAuditEntryText, ENTRY_DETAILS_UNAVAILABLE, NO_AUDIT_ENTRIES, AUDIT_LOG_TOO_LARGE, AUDIT_LOG_TITLE, AUDIT_BROWSER_MAX_HEADLINE, WIRE_PUBLIC_PLAINTEXT_KINDS, type AuditBrowserModel, type AuditEntryModel, type AuditReviewerVerdictModel, type AuditTaskAuthorizedModel, type DecryptContentFn, } from './audit-browser';
+export { buildAuditBrowserModel, routeAuditEntry, auditKindLabel, auditKindCopy, renderAuditBrowserText, renderAuditEntryText, ENTRY_DETAILS_UNAVAILABLE, NO_AUDIT_ENTRIES, AUDIT_LOG_TOO_LARGE, AUDIT_LOG_TITLE, AUDIT_BROWSER_MAX_HEADLINE, WIRE_PUBLIC_PLAINTEXT_KINDS, formatAuditExport, type AuditDetailRow, type AuditFilterOptions, type AuditExportFormat, type AuditExportPayload, type AuditBrowserModel, type AuditEntryModel, type AuditReviewerVerdictModel, type AuditTaskAuthorizedModel, type DecryptContentFn, } from './audit-browser';
 export { runAuditBrowser, renderAuditResultText, AUDIT_BROWSER_UPGRADE_HINT, type RunAuditBrowserResult, type RunAuditBrowserDeps, } from './audit-runner';
 export { buildAuditFlagIndex, runFlagCommand, renderFlagResultText, FLAG_NO_INDEX_LINE, type RunFlagCommandResult, type RunFlagCommandDeps, type FlagAppSyncClient, } from './flag-command';
 export { AuditLogPanel } from './components/AuditLogPanel';
@@ -807,7 +807,13 @@ export interface HandleShellUserInputDeps extends StructuralSummaryRunDeps {
      * `args.session.sessionId`. Tests inject a stub to drive the PENDING-marker
      * rewrite without live fetch / decrypt.
      */
-    runAuditBrowserFn?: (taskId: string) => Promise<RunAuditBrowserResult>;
+    runAuditBrowserFn?: (taskId: string, options?: {
+        kind?: string;
+        verdictsOnly?: boolean;
+        limit?: number;
+        offset?: number;
+        sessionId?: string;
+    }) => Promise<RunAuditBrowserResult>;
     /**
      * O1 C1 (#652) — Test seam for the async `/flag <entry-id>` dispatch.
      * Defaults to `runFlagCommand` over `args.appsyncClient` + the retained
@@ -933,6 +939,14 @@ export declare function buildContinuationActionDeps(args: RunOrchestrationShellA
  * The URL regex is copied from `protectUrls` (unexported in local-advisory.ts).
  */
 export declare function detectBrowseFastPath(text: string, pending: PendingClarification | null): string[] | null;
+/**
+ * Tokenize a command line string respecting single/double quotes and backslash escapes.
+ * Returns tokens array or error if unclosed quote / trailing escape.
+ */
+export declare function tokenizeCommandLine(input: string): {
+    tokens: string[];
+    error?: string;
+};
 export declare function handleShellUserInput(deps: HandleShellUserInputDeps): Promise<void>;
 /**
  * [A1g] Stage-2 round-4 (Codex round-3 MEDIUM) — the EXPLICIT per-turn panel-

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/types.d.ts

@@ -775,6 +775,8 @@ export interface AuditFlagEntryRecord {
 export interface AuditFlagIndex {
     /** The task whose listing was rendered — becomes `flaggedTaskId`. */
     taskId: string;
+    /** The session under which the audit was browsed (for session key + emit scoping). */
+    sessionId?: string;
     /** `entryId → record` for every entry in the last-rendered listing. */
     entries: Map<string, AuditFlagEntryRecord>;
     /** Entry ids flagged this session (dedup no-op render on repeat `/flag`). */

package/node_modules/@quantiya/codevibe-core/dist/tool-activity/types.d.ts

@@ -28,11 +28,11 @@ export declare const ToolActivityDetailSchema: z.ZodObject<{
     i: z.ZodNumber;
     digest: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    digest: string;
     i: number;
-}, {
     digest: string;
+}, {
     i: number;
+    digest: string;
 }>;
 export type ToolActivityDetail = z.infer<typeof ToolActivityDetailSchema>;
 /**
@@ -58,35 +58,35 @@ export declare const ToolActivityGroupSchema: z.ZodObject<{
         i: z.ZodNumber;
         digest: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        digest: string;
         i: number;
-    }, {
         digest: string;
+    }, {
         i: number;
+        digest: string;
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     count: number;
+    tool: string;
     occurrences: {
         id: string;
         ts: string;
     }[];
-    tool: string;
     target?: string | undefined;
     detail?: {
-        digest: string;
         i: number;
+        digest: string;
     }[] | undefined;
 }, {
     count: number;
+    tool: string;
     occurrences: {
         id: string;
         ts: string;
     }[];
-    tool: string;
     target?: string | undefined;
     detail?: {
-        digest: string;
         i: number;
+        digest: string;
     }[] | undefined;
 }>;
 export type ToolActivityGroup = z.infer<typeof ToolActivityGroupSchema>;
@@ -122,50 +122,50 @@ export declare const ToolActivityManifestSchema: z.ZodObject<{
             i: z.ZodNumber;
             digest: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            digest: string;
             i: number;
-        }, {
             digest: string;
+        }, {
             i: number;
+            digest: string;
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         count: number;
+        tool: string;
         occurrences: {
             id: string;
             ts: string;
         }[];
-        tool: string;
         target?: string | undefined;
         detail?: {
-            digest: string;
             i: number;
+            digest: string;
         }[] | undefined;
     }, {
         count: number;
+        tool: string;
         occurrences: {
             id: string;
             ts: string;
         }[];
-        tool: string;
         target?: string | undefined;
         detail?: {
-            digest: string;
             i: number;
+            digest: string;
         }[] | undefined;
     }>, "many">;
     continues: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     groups: {
         count: number;
+        tool: string;
         occurrences: {
             id: string;
             ts: string;
         }[];
-        tool: string;
         target?: string | undefined;
         detail?: {
-            digest: string;
             i: number;
+            digest: string;
         }[] | undefined;
     }[];
     trackId?: string | null | undefined;
@@ -176,15 +176,15 @@ export declare const ToolActivityManifestSchema: z.ZodObject<{
 }, {
     groups: {
         count: number;
+        tool: string;
         occurrences: {
             id: string;
             ts: string;
         }[];
-        tool: string;
         target?: string | undefined;
         detail?: {
-            digest: string;
             i: number;
+            digest: string;
         }[] | undefined;
     }[];
     trackId?: string | null | undefined;
@@ -239,50 +239,50 @@ export declare const ToolActivityOutboxEnvelopeSchema: z.ZodObject<{
                 i: z.ZodNumber;
                 digest: z.ZodString;
             }, "strip", z.ZodTypeAny, {
-                digest: string;
                 i: number;
-            }, {
                 digest: string;
+            }, {
                 i: number;
+                digest: string;
             }>, "many">>;
         }, "strip", z.ZodTypeAny, {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             target?: string | undefined;
             detail?: {
-                digest: string;
                 i: number;
+                digest: string;
             }[] | undefined;
         }, {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             target?: string | undefined;
             detail?: {
-                digest: string;
                 i: number;
+                digest: string;
             }[] | undefined;
         }>, "many">;
         continues: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         groups: {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             target?: string | undefined;
             detail?: {
-                digest: string;
                 i: number;
+                digest: string;
             }[] | undefined;
         }[];
         trackId?: string | null | undefined;
@@ -293,15 +293,15 @@ export declare const ToolActivityOutboxEnvelopeSchema: z.ZodObject<{
     }, {
         groups: {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             target?: string | undefined;
             detail?: {
-                digest: string;
                 i: number;
+                digest: string;
             }[] | undefined;
         }[];
         trackId?: string | null | undefined;
@@ -317,15 +317,15 @@ export declare const ToolActivityOutboxEnvelopeSchema: z.ZodObject<{
     manifest: {
         groups: {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             target?: string | undefined;
             detail?: {
-                digest: string;
                 i: number;
+                digest: string;
             }[] | undefined;
         }[];
         trackId?: string | null | undefined;
@@ -343,15 +343,15 @@ export declare const ToolActivityOutboxEnvelopeSchema: z.ZodObject<{
     manifest: {
         groups: {
             count: number;
+            tool: string;
             occurrences: {
                 id: string;
                 ts: string;
             }[];
-            tool: string;
             target?: string | undefined;
             detail?: {
-                digest: string;
                 i: number;
+                digest: string;
             }[] | undefined;
         }[];
         trackId?: string | null | undefined;

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.21",
+  "version": "2.0.22",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/node_modules/color-convert/CHANGELOG.md

@@ -0,0 +1,54 @@
+# 1.0.0 - 2016-01-07
+
+- Removed: unused speed test
+- Added: Automatic routing between previously unsupported conversions
+([#27](https://github.com/Qix-/color-convert/pull/27))
+- Removed: `xxx2xxx()` and `xxx2xxxRaw()` functions
+([#27](https://github.com/Qix-/color-convert/pull/27))
+- Removed: `convert()` class
+([#27](https://github.com/Qix-/color-convert/pull/27))
+- Changed: all functions to lookup dictionary
+([#27](https://github.com/Qix-/color-convert/pull/27))
+- Changed: `ansi` to `ansi256`
+([#27](https://github.com/Qix-/color-convert/pull/27))
+- Fixed: argument grouping for functions requiring only one argument
+([#27](https://github.com/Qix-/color-convert/pull/27))
+
+# 0.6.0 - 2015-07-23
+
+- Added: methods to handle
+[ANSI](https://en.wikipedia.org/wiki/ANSI_escape_code#Colors) 16/256 colors:
+  - rgb2ansi16
+  - rgb2ansi
+  - hsl2ansi16
+  - hsl2ansi
+  - hsv2ansi16
+  - hsv2ansi
+  - hwb2ansi16
+  - hwb2ansi
+  - cmyk2ansi16
+  - cmyk2ansi
+  - keyword2ansi16
+  - keyword2ansi
+  - ansi162rgb
+  - ansi162hsl
+  - ansi162hsv
+  - ansi162hwb
+  - ansi162cmyk
+  - ansi162keyword
+  - ansi2rgb
+  - ansi2hsl
+  - ansi2hsv
+  - ansi2hwb
+  - ansi2cmyk
+  - ansi2keyword
+([#18](https://github.com/harthur/color-convert/pull/18))
+
+# 0.5.3 - 2015-06-02
+
+- Fixed: hsl2hsv does not return `NaN` anymore when using `[0,0,0]`
+([#15](https://github.com/harthur/color-convert/issues/15))
+
+---
+
+Check out commit logs for older releases

package/node_modules/cross-spawn/node_modules/which/CHANGELOG.md

@@ -0,0 +1,166 @@
+# Changes
+
+
+## 2.0.2
+
+* Rename bin to `node-which`
+
+## 2.0.1
+
+* generate changelog and publish on version bump
+* enforce 100% test coverage
+* Promise interface
+
+## 2.0.0
+
+* Parallel tests, modern JavaScript, and drop support for node < 8
+
+## 1.3.1
+
+* update deps
+* update travis
+
+## v1.3.0
+
+* Add nothrow option to which.sync
+* update tap
+
+## v1.2.14
+
+* appveyor: drop node 5 and 0.x
+* travis-ci: add node 6, drop 0.x
+
+## v1.2.13
+
+* test: Pass missing option to pass on windows
+* update tap
+* update isexe to 2.0.0
+* neveragain.tech pledge request
+
+## v1.2.12
+
+* Removed unused require
+
+## v1.2.11
+
+* Prevent changelog script from being included in package
+
+## v1.2.10
+
+* Use env.PATH only, not env.Path
+
+## v1.2.9
+
+* fix for paths starting with ../
+* Remove unused `is-absolute` module
+
+## v1.2.8
+
+* bullet items in changelog that contain (but don't start with) #
+
+## v1.2.7
+
+* strip 'update changelog' changelog entries out of changelog
+
+## v1.2.6
+
+* make the changelog bulleted
+
+## v1.2.5
+
+* make a changelog, and keep it up to date
+* don't include tests in package
+* Properly handle relative-path executables
+* appveyor
+* Attach error code to Not Found error
+* Make tests pass on Windows
+
+## v1.2.4
+
+* Fix typo
+
+## v1.2.3
+
+* update isexe, fix regression in pathExt handling
+
+## v1.2.2
+
+* update deps, use isexe module, test windows
+
+## v1.2.1
+
+* Sometimes windows PATH entries are quoted
+* Fixed a bug in the check for group and user mode bits. This bug was introduced during refactoring for supporting strict mode.
+* doc cli
+
+## v1.2.0
+
+* Add support for opt.all and -as cli flags
+* test the bin
+* update travis
+* Allow checking for multiple programs in bin/which
+* tap 2
+
+## v1.1.2
+
+* travis
+* Refactored and fixed undefined error on Windows
+* Support strict mode
+
+## v1.1.1
+
+* test +g exes against secondary groups, if available
+* Use windows exe semantics on cygwin & msys
+* cwd should be first in path on win32, not last
+* Handle lower-case 'env.Path' on Windows
+* Update docs
+* use single-quotes
+
+## v1.1.0
+
+* Add tests, depend on is-absolute
+
+## v1.0.9
+
+* which.js: root is allowed to execute files owned by anyone
+
+## v1.0.8
+
+* don't use graceful-fs
+
+## v1.0.7
+
+* add license to package.json
+
+## v1.0.6
+
+* isc license
+
+## 1.0.5
+
+* Awful typo
+
+## 1.0.4
+
+* Test for path absoluteness properly
+* win: Allow '' as a pathext if cmd has a . in it
+
+## 1.0.3
+
+* Remove references to execPath
+* Make `which.sync()` work on Windows by honoring the PATHEXT variable.
+* Make `isExe()` always return true on Windows.
+* MIT
+
+## 1.0.2
+
+* Only files can be exes
+
+## 1.0.1
+
+* Respect the PATHEXT env for win32 support
+* should 0755 the bin
+* binary
+* guts
+* package
+* 1st

package/node_modules/deep-extend/CHANGELOG.md

@@ -0,0 +1,46 @@
+Changelog
+=========
+
+v0.6.0
+------
+
+- Updated "devDependencies" versions to fix vulnerability alerts
+- Dropped support of io.js and node.js v0.12.x and lower since new versions of
+  "devDependencies" couldn't work with those old node.js versions
+  (minimal supported version of node.js now is v4.0.0)
+
+v0.5.1
+------
+
+- Fix prototype pollution vulnerability (thanks to @mwakerman for the PR)
+- Avoid using deprecated Buffer API (thanks to @ChALkeR for the PR)
+
+v0.5.0
+------
+
+- Auto-testing provided by Travis CI;
+- Support older Node.JS versions (`v0.11.x` and `v0.10.x`);
+- Removed tests files from npm package.
+
+v0.4.2
+------
+
+- Fix for `null` as an argument.
+
+v0.4.1
+------
+
+- Removed test code from <b>npm</b> package
+  ([see pull request #21](https://github.com/unclechu/node-deep-extend/pull/21));
+- Increased minimal version of Node from `0.4.0` to `0.12.0`
+  (because can't run tests on lesser version anyway).
+
+v0.4.0
+------
+
+- **WARNING!** Broken backward compatibility with `v0.3.x`;
+- Fixed bug with extending arrays instead of cloning;
+- Deep cloning for arrays;
+- Check for own property;
+- Fixed some documentation issues;
+- Strict JS mode.