@quantiya/codevibe-claude-plugin 2.0.40 → 2.0.42

package/node_modules/@quantiya/codevibe-core/dist/local-executor/env-scrub.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Pinned search API keys that must never be leaked into any subprocess
+ * an implementor, reviewer, or verification test script can influence (REQ-08, A-MCP-04).
+ */
+export declare const SEARCH_API_KEY_NAMES: readonly string[];
+/**
+ * Scrub search API keys from a ProcessEnv object.
+ * Returns a shallow clone of the env object with sensitive keys removed.
+ */
+export declare function scrubSearchApiKeys(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/node_modules/@quantiya/codevibe-core/dist/local-executor/implementor-argv.d.ts

@@ -81,6 +81,26 @@ export declare function bindAgyPrintPrompt(argv: readonly string[], prompt: stri
  * resolver).
  */
 export declare function agyWorkdirBriefPreamble(workdir: string): string;
+/**
+ * Extracts the MCP bridge server command and arguments from an ephemeral MCP config JSON.
+ * Returns null if the configuration is missing, unreadable, or invalid (fail closed).
+ */
+export declare function extractMcpServerConfig(mcpConfigPath?: string): {
+    command: string;
+    args: string[];
+} | null;
+/**
+ * Configures an ephemeral Antigravity plugin (.agents/plugins/codevibe-web/)
+ * inside the task worktree / shadow directory to expose guarded web MCP tools to agy.
+ */
+export declare function setupAgyWebPlugin(workdir: string, server: {
+    command: string;
+    args: string[];
+}): void;
+/**
+ * Removes the ephemeral Antigravity plugin from workdir on CP-7 substrate engagement.
+ */
+export declare function stripAgyWebPlugin(workdir: string): void;
 /**
  * Build the implementor invocation argv for `agent` in `mode`. The leading
  * executable name (`claude` / `codex` / `agy`) is the argv[0] so callers can
@@ -96,7 +116,9 @@ export declare function agyWorkdirBriefPreamble(workdir: string): string;
  * instead of silently no-oping into agy's scratch). The cwd-based agents
  * ignore it.
  */
-export declare function buildImplementorArgv(agent: AgentKind, mode: ImplementorMode, workdir?: string): ImplementorArgvPlan;
+export declare function buildImplementorArgv(agent: AgentKind, mode: ImplementorMode, workdir?: string, options?: {
+    mcpConfigPath?: string;
+}): ImplementorArgvPlan;
 /**
  * A1b (Codex summary never-read fix, READ side) — read a Codex implementor's
  * `--output-last-message` capture file, resolving the HOST path the same way
@@ -252,6 +274,7 @@ export declare function makeImplementorCommandScope(): AuthorityScope;
  * path after `--output-last-message` is absorbed by the wildcard).
  */
 export declare const CODEX_DANGER_FULL_ACCESS_COMMAND = "codex exec --sandbox danger-full-access --skip-git-repo-check --color never --json --ephemeral --output-last-message *";
+export declare const CODEX_DANGER_FULL_ACCESS_WEB_COMMAND = "codex exec --sandbox danger-full-access --skip-git-repo-check --color never --json --ephemeral -c web_search=\"disabled\" -c mcp_servers.codevibe_web.command=\"node\" *";
 /**
  * Return a scope that ADDS the boundary-confined Codex `danger-full-access`
  * command authority (`CODEX_DANGER_FULL_ACCESS_COMMAND`) to `scope`'s
@@ -263,3 +286,13 @@ export declare const CODEX_DANGER_FULL_ACCESS_COMMAND = "codex exec --sandbox da
  * returns `scope` unchanged if already present.
  */
 export declare function withBoundaryConfinedCommandAuthority(scope: AuthorityScope): AuthorityScope;
+/**
+ * Strips web-browsing MCP tools and flags from a Claude argv to ensure fail-closed
+ * execution on CP-7 substrate paths (REQ-16). Restores standard Claude plan/execute argv.
+ */
+export declare function stripClaudeWebArgs(argv: string[]): string[];
+/**
+ * Strips web-browsing MCP tools and flags from a Codex argv to ensure fail-closed
+ * execution on CP-7 substrate paths (REQ-16). Restores standard Codex plan/execute argv.
+ */
+export declare function stripCodexWebArgs(argv: string[]): string[];

package/node_modules/@quantiya/codevibe-core/dist/local-executor/index.d.ts

@@ -1,11 +1,12 @@
 export { AuthorityError, AuthorityRefusal, AuthorityRefusalCategory, AuthorityScope, FileNotFound, enforceCommand, enforceNetwork, enforceRead, enforceWrite, safeReadFile, safeWriteFile, } from './authority';
 export { spawnHealthProbe, spawnImplementor, spawnReviewer } from './spawn';
 export { AgentKind, AuthorityAction, ClassBInbound, ExecutorError, FailureClass, FileChangeKind, GateDispatchPayload, GateDispatchReviewerSeat, HookEvent, ImplementorHandle, LocalExecutor, MergeGateDispatchPayload, ProbeHandle, ProcessExitedInfo, ProcessRole, ProcessSpawnedInfo, ReviewerHandle, ReviewerDispatchPayload, ReviseFeedbackPayload, ReviseSeatFinding, SignedEnvelope, SpawnArgs, SpawnArgsInvalid, SpawnHandleBase, TaskGroupHaltedPayload, TrackAssignedPayload, TrackConflictContext, } from './types';
-export { agyImplementorAllowlistEntries, agyWorkdirBriefPreamble, AGY_IMPLEMENTOR_PRINT_TIMEOUT, buildImplementorArgv, IMPLEMENTOR_COMMAND_ALLOWLIST, makeImplementorCommandScope, resolveAgyModel, type ImplementorArgvPlan, type ImplementorCaptureSurface, type ImplementorMode, } from './implementor-argv';
+export { agyImplementorAllowlistEntries, agyWorkdirBriefPreamble, AGY_IMPLEMENTOR_PRINT_TIMEOUT, buildImplementorArgv, extractMcpServerConfig, setupAgyWebPlugin, stripAgyWebPlugin, stripClaudeWebArgs, stripCodexWebArgs, IMPLEMENTOR_COMMAND_ALLOWLIST, makeImplementorCommandScope, resolveAgyModel, type ImplementorArgvPlan, type ImplementorCaptureSurface, type ImplementorMode, } from './implementor-argv';
 export { verifyClassBEd25519, classBCanonicalForSigning, ed25519PublicKeyFromRaw, type ClassBCryptoVerifyResult, } from './class-b-verify';
 export { TrackRegistry, TrackProcess, trackKey } from './track-registry';
 export { EmitShellEventFn, HookBridge, HookBridgeDeps, } from './hook-bridge';
 export { LocalExecutorImpl, LocalExecutorImplDeps, MergeGateAppSyncClient, MergeGateContentEncryptor, TEAM_TRACK_HEARTBEAT_INTERVAL_MS, makeEmptyScope, } from './local-executor-impl';
+export { SEARCH_API_KEY_NAMES, scrubSearchApiKeys, } from './env-scrub';
 export type { SubstrateEngager, SubstrateEngageResult, StrictBadgeSink, } from './local-executor-impl';
 export { Cp7AuditWriter, CP7_CANONICAL_FORM_VERSION, GENESIS_PREV_HASH, canonicalJson, canonicalEntryBytes, computeEntryHash, verifyChain, } from './cp7-audit-writer';
 export type { Cp7AuditEntry } from './cp7-audit-writer';

package/node_modules/@quantiya/codevibe-core/dist/local-executor/local-executor-impl.d.ts

@@ -112,6 +112,7 @@ export type SubstrateEngager = (input: {
      * applies whenever the row cannot be established).
      */
     requireConfined?: boolean;
+    webBrowsingActive?: boolean;
 }) => Promise<SubstrateEngageResult>;
 /** Backend lease is 15 minutes; three renewal opportunities fit inside it. */
 export declare const TEAM_TRACK_HEARTBEAT_INTERVAL_MS: number;

package/node_modules/@quantiya/codevibe-core/dist/local-executor/types.d.ts

@@ -18,6 +18,7 @@ export interface SpawnArgs {
     stdinPayload?: string;
     signal?: AbortSignal;
     taskId?: string;
+    webTurnActive?: boolean;
     lifecycleAudit?: 'active_task' | 'none';
     onProcessSpawned?: ProcessSpawnedHook;
     onProcessExited?: ProcessExitedHook;

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/cli.d.ts

@@ -130,7 +130,7 @@ export declare const ORCHESTRATION_ORPHAN_SWEEP_STALE_THRESHOLD_MS: number;
  * aborted test runs, or ungraceful terminal closures. Non-blocking best-effort
  * operation; mirrors companion-plugin startup sweeps.
  */
-export declare function triggerStartupOrphanSweep(appsyncClient: AppSyncClient, currentSessionId: string, staleThresholdMs?: number): Promise<number>;
+export declare function triggerStartupOrphanSweep(appsyncClient: AppSyncClient, currentSessionId: string, staleThresholdMs?: number, tmpRoot?: string): Promise<number>;
 /**
  * CP-8 Slice C (#570) — parse a top-level `audit show <task-id> [--json]
  * [--session <id>]` subcommand from the raw argv. Returns null when the argv is