@quantiya/codevibe-claude-plugin 2.0.28 → 2.0.29

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/gate-decision-submit.d.ts

@@ -62,7 +62,7 @@ export interface GateDecisionSubmitDeps {
      * 2026-06-11, option-4 "Reject and restart"). `undefined` when no shadow was
      * mapped at decision time (or no loop is wired).
      */
-    onTerminalDecision?: (taskId: string, postAction: PostDecisionAction, expectedShadow?: unknown) => Promise<void> | void;
+    onTerminalDecision?: (taskId: string, postAction: PostDecisionAction, expectedShadow?: unknown, canonicalDecision?: string) => Promise<void> | void;
     /**
      * Optional — resolves the live shadow INSTANCE for a task at decision time. Read
      * ONCE at the TOP of `submitGateDecision` (BEFORE the `applyUserDecision` SDK

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/index.d.ts

@@ -131,6 +131,10 @@ export interface RunOrchestrationShellArgs {
     teamShellEventTap?: {
         fn: (args: TeamTapEvent) => void;
     };
+    /** P36: Store-tap installed by cli.ts so team merge audit summaries are routed into this shell's store. */
+    teamMergeAuditSummaryTap?: {
+        fn: (summary: any) => void;
+    };
     /**
      * CP-1.f §3.C.20 — the desktop reviewer-quorum loop driver. Present for a
      * real Max session (constructed in `cli.ts` alongside the team LE). When
@@ -235,14 +239,20 @@ export { configureContextItemsHostedSync, wakeContextItemsHostedSync, drainConte
 export { compactSessionContext, maybeFireCompactionSafetyValve, rehydrateSessionContext, renderRehydratedSessionContext, distillItems, projectDistilledForRole, loadCompactionCache, compactionCachePath, onTaskBoundary, gcContextItemLogs, scheduleContextItemsGc, COMPACTION_SAFETY_VALVE_TAIL_BYTES, COMPACTION_KEEP_HOT_RECENT_ITEMS, CONTEXT_ITEMS_RETENTION_MS, SESSION_CONTEXT_SECTION_MAX_CHARS, type DistilledFact, type DistilledTaskSummary, type SessionCompactionCache, type CompactionResult, type RehydratedSessionContext, } from './context-compaction';
 export { routeSlashCommand, applySlashOutput, type SlashOutput, type ShellAction, } from './slash-router';
 export { buildAuditBrowserModel, routeAuditEntry, auditKindLabel, auditKindCopy, renderAuditBrowserText, renderAuditEntryText, ENTRY_DETAILS_UNAVAILABLE, NO_AUDIT_ENTRIES, AUDIT_LOG_TOO_LARGE, AUDIT_LOG_TITLE, AUDIT_BROWSER_MAX_HEADLINE, WIRE_PUBLIC_PLAINTEXT_KINDS, formatAuditExport, type AuditDetailRow, type AuditFilterOptions, type AuditExportFormat, type AuditExportPayload, type AuditBrowserModel, type AuditEntryModel, type AuditReviewerVerdictModel, type AuditTaskAuthorizedModel, type DecryptContentFn, } from './audit-browser';
-export { runAuditBrowser, renderAuditResultText, AUDIT_BROWSER_UPGRADE_HINT, type RunAuditBrowserResult, type RunAuditBrowserDeps, } from './audit-runner';
+export { runAuditBrowser, renderAuditResultText, AUDIT_BROWSER_UPGRADE_HINT, type RunAuditBrowserResult, type RunAuditBrowserDeps, runAuditSummary, AUDIT_SUMMARY_PRO_MAX_HEADLINE, AUDIT_SUMMARY_UPGRADE_HINT, type RunAuditSummaryResult, type RunAuditSummaryDeps, } from './audit-runner';
+export { compileAuditSummary, renderSummaryMarkdown, isTaskCompletionAuditSummary, type TaskAuditSummaryModel, type AuditSeatModel, type AuditFindingModel, type VerificationResultModel, type TaskCompletionOutcome, type UserDecisionRecord, type ReviewHistorySnapshot, } from './audit-summary';
+export { atomicWriteJsonSync, FileDurableTeamDeliveryJournal, wireSnapshotMergeObserver, adaptSnapshotMergeResult, runSnapshotMergeWithObservedCleanup, emitTeamCompletionSummary, type AtomicWriteOptions, type TeamDeliveryJournalEntry, type TeamDeliveryRouting, type SnapshotCleanupObserver, type WireSnapshotMergeObserverResult, type AdaptedSnapshotMergeResult, type RunSnapshotMergeWithObservedCleanupOptions, type EmitTeamCompletionSummaryOptions, type EmitTeamCompletionSummaryResult, } from '../local-executor/team-summary';
 export { buildAuditFlagIndex, runFlagCommand, renderFlagResultText, FLAG_NO_INDEX_LINE, type RunFlagCommandResult, type RunFlagCommandDeps, type FlagAppSyncClient, } from './flag-command';
 export { AuditLogPanel } from './components/AuditLogPanel';
+export { renderConversationEntry, ConversationPane } from './components/ConversationPane';
+export { renderEntryAsLine, runLineLogFallback } from './non-tty-fallback';
+export { initInkRuntime, getInkRuntime } from './ink-runtime';
 export { reducer } from './reducer';
 export { createOrchestrationStore, type OrchestrationStore } from './store';
 export type { Mode, Tier, PlannerDecision, AgentKind, PlannerHealthState, RunningTaskState, ReviewerSeatState, GateState, ExecutionEventEntry, RefusalEventEntry, BypassEventEntry, MobileEventEntry, EventStreamEntry, ConversationEntry, QueuedTask, PendingClarification, OrchestrationState, OrchestrationAction, LastModeFile, TeamState, TeamTrackEntry, TeamTrackState, TeamMergeGateStatus, LiveProgress, } from './types';
 export { formatElapsed, isSpinnerPhase, renderProgressLine, type TaskProgressEvent, type OnProgress, } from './task-progress';
 export { runDeclaredTestSurfaces, DECLARED_TEST_TIMEOUT_MS, type DeclaredTestResult, type DeclaredTestReason, type RunDeclaredTestSurfacesArgs, } from './declared-test-runner';
+export { QuorumLoop, type QuorumLoopDeps } from './quorum-loop';
 /**
  * [A1g] Round-5 (Codex round-4 MEDIUM) — INVOCATION-OWNED conversation deltas.
  *
@@ -296,6 +306,13 @@ export declare const turnAuthoringContext: AsyncLocalStorage<TurnAuthoringSink>;
  * OUTERMOST diff — never double-pushed.
  */
 export declare function installTurnAuthoringDispatchWrapper(store: OrchestrationStore): void;
+/**
+ * P36 / R7-F1: Wire team merge audit summary dispatch to desktop conversation store.
+ */
+export declare function wireTeamMergeAuditSummary(store: OrchestrationStore, target: {
+    fn?: (summary: any) => void;
+    onTeamMergeAuditSummary?: (summary: any) => void;
+}): void;
 /**
  * §5 lines 336-365 LOCK + §16 LOCK #14. Single entrypoint that wires
  * the store + emit chokepoint + slash router and either mounts the
@@ -364,7 +381,11 @@ export declare const TASK_REVIEW_SUMMARY_FETCH_TIMEOUT_MS = 5000;
  * dispatcher stays decoupled from the SDK + session-key plumbing (and is
  * unit-testable with a mock).
  */
-export type ReviewSummaryFetcher = (taskId: string, gateId: string, sessionId: string) => Promise<DecryptedReviewSummaryInput | null>;
+export type ReviewSummaryFetcher = (taskId: string, gateId: string, sessionId: string, options?: {
+    isAbandoned?: () => boolean;
+    expectedGeneration?: number;
+    expectedFence?: number;
+}) => Promise<DecryptedReviewSummaryInput | null>;
 export declare function handleSubscribedEvent(event: Event, store: OrchestrationStore, sessionKeyResolver?: (sessionId: string) => Promise<string | null>, reviewSummaryFetcher?: ReviewSummaryFetcher, maybeAutoContinue?: (envelope: GatePromptEnvelope) => boolean, onDurableGateResolution?: (resolution: DurableGateResolution) => Promise<void> | void): void;
 /**
  * Route a `USER_PROMPT` sent from the paired MOBILE companion into the shell's

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/quorum-loop.d.ts

@@ -3,6 +3,9 @@ import type { Session } from '../types';
 import type { LocalExecutor } from '../local-executor';
 import type { ClassBInbound } from '../local-executor/types';
 import type { ImageAttachment } from './types';
+import { type TaskAuditSummaryModel, type ReviewHistorySnapshot, type UserDecisionRecord } from './audit-summary';
+import type { DecryptedReviewSummaryInput } from './gate-prompts';
+import type { ShellEventEmit, ShellEventEmitResult } from './emit-shell-event';
 import { type ImplementorMode } from '../local-executor/implementor-argv';
 import { type FallbackLadderDeps } from '../substrate-launch/fallback-ladder';
 import type { ConflictModelCaller } from '../local-executor/class2-resolver';
@@ -160,13 +163,23 @@ export interface RoundFindingRecord {
     seatId: string;
     role: ReviewerRole;
     reviewerAgent: ReviewerAgentKind;
-    verdict: VerdictKind;
+    verdict: VerdictKind | string;
     /** Capped to HISTORY_SUGGESTION_MAX_CHARS each at capture. */
     suggestedChanges: string[];
     /** Capped to HISTORY_REASONING_MAX_CHARS at capture. Stored for audit /
      *  bounded reuse; NOT rendered into the brief (the brief carries verdict +
      *  suggested changes only). */
     reasoning: string;
+    /** P36: Optional review metadata preserved for task audit summary. */
+    modelUsed?: string | null;
+    tokensUsed?: number | null;
+    latencyMs?: number | null;
+    durationSeconds?: number | null;
+    residualObservations?: string[];
+    /** P36 / R1-F9: Preserved degradation metadata when history budget is exceeded. */
+    historyDegraded?: boolean;
+    omittedFindingsCount?: number;
+    omittedResidualsCount?: number;
 }
 /**
  * A1b — ONE implementor rationale entry (Stage-2 R1 Codex LOW-4: the round is
@@ -529,6 +542,15 @@ export interface QuorumLoopDeps {
      * `expiresAt = now + TTL`. ABSENT → the default `CONTINUATION_EXPIRES_TTL_MS`.
      */
     continuationTtlMs?: number;
+    /**
+     * P36: Task-completion audit summary local store callback.
+     * Dispatched directly to desktop store upon task completion.
+     */
+    onTaskAuditSummary?: (summary: TaskAuditSummaryModel, markdown: string) => void;
+    /**
+     * P36: Emitter for companion notification event.
+     */
+    emitShellEvent?: (args: ShellEventEmit) => Promise<ShellEventEmitResult>;
 }
 /**
  * Map the lowercase wire `AgentKind` (`"claude"`) used by the engine dispatch
@@ -670,6 +692,30 @@ export declare class QuorumLoop {
      * exactly: cleared on promote / discard / round-0 restart replacement.
      */
     private readonly roundHistoryByTask;
+    /**
+     * P36: Bounded FIFO map (max 500) of the most recent user decision per task,
+     * recorded by `recordUserDecision` and evicted on task promotion.
+     */
+    private readonly lastUserDecisionByTask;
+    /**
+     * P36: Bounded cache of recently completed task summary metadata (max 100).
+     * Enables reconciliation if a user decision arrives or is replayed after promotion.
+     */
+    private readonly completedTaskSummaries;
+    private readonly expectedRosterByTask;
+    private readonly taskDegradedMetadataByTask;
+    private getCompletedSummariesPath;
+    private shouldUnlinkAbandonedTmpLockFile;
+    private withCompletedSummariesLock;
+    private loadCompletedSummariesFromDisk;
+    private recordCompletedTaskSummary;
+    getCompletedTaskSummary(taskId: string): {
+        historySnapshot?: ReviewHistorySnapshot | null;
+        filesApplied: number;
+        completedAt: string;
+        originEpoch?: number;
+        workspaceApplicationStatus?: "pending_merge_gate" | "applied" | "unobserved";
+    } | undefined;
     /**
      * A1b — the implementor's own per-round stdout rationale (the
      * `extractAgentSummary` text), recorded as `{ round, text }` (LOW-4: labels
@@ -826,6 +872,11 @@ export declare class QuorumLoop {
      * cardinality is bounded by those same dedup sets).
      */
     private readonly taskByGateId;
+    private readonly activeGateByTaskId;
+    private readonly conflictedSeatsByTask;
+    private readonly nonApprovedSeatsByTask;
+    private readonly restartFenceByTaskId;
+    private readonly gateFenceByGateId;
     /** Exact immutable team generation that authored each team gate. */
     private readonly teamAuthorityByGateId;
     /**
@@ -1158,6 +1209,7 @@ export declare class QuorumLoop {
     /** Installed by the session-owning shell after both objects are constructed. */
     setWorkspaceOutcomeSink(sink: WorkspaceOutcomeSink | undefined): void;
     isWorkspaceTaskTerminallyRetired(taskId: string): boolean;
+    isTaskTerminallyRetired(taskId: string): boolean;
     /** The current active task id (for the recovery poll). */
     get activeTask(): string | null;
     /** Arm an explicit, one-shot comprehensive baseline for the active task. */
@@ -1605,6 +1657,49 @@ export declare class QuorumLoop {
      * taskId (SECURITY INVARIANT: no user content, mirrors `discarded`).
      */
     reportFinalApprovalCancelled(taskId: string, postAction: PostDecisionAction): void;
+    /**
+     * P36: Record a user decision for task audit summary compilation.
+     * Evicts the oldest entry if size exceeds 500 (FIFO).
+     */
+    recordUserDecision(taskId: string, decision: UserDecisionRecord): void;
+    /**
+     * P36: Snapshot in-memory round findings history before eviction at promote.
+     */
+    captureReviewHistorySnapshot(taskId: string): ReviewHistorySnapshot;
+    /**
+     * R18-F4: Sanitize history record for snapshot so internal raw caches and scratch fields
+     * are never copied into the serialized snapshot or persistence layer.
+     */
+    private sanitizeHistoryRecordForSnapshot;
+    /**
+     * P36: Wire or replace the desktop task-completion audit summary callback.
+     */
+    setOnTaskAuditSummary(fn: (summary: TaskAuditSummaryModel, markdown: string) => void): void;
+    /**
+     * P36 / R13-F1 / R14-F2 / R14-F3 / R14-F4 / R14-F5:
+     * Ingest wire review summary fetched from AppSync (getTaskReviewSummary)
+     * into the in-memory roundHistoryByTask map so post-promotion task audit summary
+     * generation has full reviewer provenance without requiring preloaded disk fixtures.
+     *
+     * Reconciles idempotently by (roundNum, seatIdStr), preserving local high-fidelity telemetry,
+     * enforces fail-closed roster declaration from reviewQuorum.seats, parses verdicts strictly
+     * (never defaulting missing/invalid decisions to APPROVE), tracks degradation metadata,
+     * and rejects late fetches for terminally retired or completed tasks.
+     */
+    ingestReviewSummary(taskId: string, summary: DecryptedReviewSummaryInput): void;
+    /**
+     * Public helper to retrieve the task's current restart generation fence.
+     */
+    getRestartFence(taskId: string): number;
+    /**
+     * Statically/externally register an active gate mapping for a task (e.g., prompt arrival or test fixture).
+     */
+    registerActiveGate(taskId: string, gateId: string, roundNumber?: number, generationFence?: number): void;
+    /**
+     * Check whether an incoming gate review summary is still relevant for the specified task.
+     * Rejects requests if task is retired, summary is completed, or gate does not match active task gate and restart fence.
+     */
+    isGateRelevantForTask(taskId: string, gateId: string, expectedGeneration?: number, expectedFence?: number): boolean;
     /**
      * Authoritative TaskGroupHalted bridge from LocalExecutor. Calling this async
      * method publishes the terminal group fence synchronously (before its first

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.24",
+  "version": "2.0.25",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -17,7 +17,7 @@
     "typecheck": "tsc --noEmit",
     "emit-types": "tsc --emitDeclarationOnly",
     "build": "rm -rf dist && npm run emit-types && esbuild src/index.ts --bundle --platform=node --target=node18 --minify --packages=external --define:__CODEVIBE_TEST_BUILD__=false --outfile=dist/index.js && esbuild src/orchestration-shell/cli.ts --bundle --platform=node --target=node18 --minify-syntax --packages=external --define:__CODEVIBE_TEST_BUILD__=false --outfile=dist/orchestration-shell/cli.js --banner:js=\"#!/usr/bin/env node\" && npm run verify-no-test-hooks",
-    "verify-no-test-hooks": "if grep -ERl 'CODEVIBE_TEST_FORCE_QUOTA_FAIL|CODEVIBE_TEST_FORCE_IMPLEMENTOR_AGENT|CODEVIBE_ANCHORED_PUBLICATION_AUTHORITY_ROOT|codevibe-anchored-publications-|cv-publication-authority-vitest-|codevibe\\.test\\.publication-authority-|setPublicationAuthorityRootForTestBuild|__CODEVIBE_TEST_BUILD__' dist; then echo 'ERROR: a test-only hook leaked into a published artifact (prod-unreachability invariant)'; exit 1; fi; echo 'OK — no test-only hooks in published artifacts'",
+    "verify-no-test-hooks": "if grep -ERl 'CODEVIBE_TEST_FORCE_QUOTA_FAIL|CODEVIBE_TEST_FORCE_IMPLEMENTOR_AGENT|CODEVIBE_ANCHORED_PUBLICATION_AUTHORITY_ROOT|codevibe-anchored-publications-|cv-publication-authority-vitest-|codevibe\\.test\\.publication-authority-|setPublicationAuthorityRootForTestBuild|__CODEVIBE_TEST_BUILD__|_onBeforeLinkForTesting|_onBeforeSummariesLockForTesting|__codevibe_test_on_before_link|__codevibe_test_on_before_summaries_lock' dist; then echo 'ERROR: a test-only hook leaked into a published artifact (prod-unreachability invariant)'; exit 1; fi; echo 'OK — no test-only hooks in published artifacts'",
     "clean": "rm -rf dist",
     "prepublishOnly": "npm run build",
     "test": "vitest run",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-claude-plugin",
-  "version": "2.0.28",
+  "version": "2.0.29",
   "description": "Control Claude Code from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -48,7 +48,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "^2.0.24",
+    "@quantiya/codevibe-core": "^2.0.25",
     "@quantiya/quorum-core": "^1.0.1",
     "dotenv": "^16.6.1",
     "express": "^5.1.0",