@quantiya/codevibe-claude-plugin 2.0.41 → 2.0.42

package/node_modules/@quantiya/codevibe-core/dist/local-executor/local-executor-impl.d.ts

@@ -112,6 +112,7 @@ export type SubstrateEngager = (input: {
      * applies whenever the row cannot be established).
      */
     requireConfined?: boolean;
+    webBrowsingActive?: boolean;
 }) => Promise<SubstrateEngageResult>;
 /** Backend lease is 15 minutes; three renewal opportunities fit inside it. */
 export declare const TEAM_TRACK_HEARTBEAT_INTERVAL_MS: number;

package/node_modules/@quantiya/codevibe-core/dist/local-executor/types.d.ts

@@ -18,6 +18,7 @@ export interface SpawnArgs {
     stdinPayload?: string;
     signal?: AbortSignal;
     taskId?: string;
+    webTurnActive?: boolean;
     lifecycleAudit?: 'active_task' | 'none';
     onProcessSpawned?: ProcessSpawnedHook;
     onProcessExited?: ProcessExitedHook;

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/cli.js

@@ -18616,11 +18616,11 @@ function renderLocalGemmaPlannerPrompt(input, options) {
     "Never refuse merely because the user asks about local repository files, the current directory, the workspace, or the project. Refuse only for clearly unsafe requests such as exposing secrets/credentials, destructive root/home deletion, malware, bypassing auth/paywalls, or exfiltration.",
     "",
     "Routing rules:",
-    '- start_task: user asks to create, add, edit, fix, implement, refactor, test, run tests, or review a SPECIFIC, BOUNDED change \u2014 such as their pending diff, staged/uncommitted changes, a named file, or a pull request. (A BROAD "review/audit the WHOLE codebase for bugs" is read-only understanding \u2192 familiarize, NOT start_task \u2014 see below.) If the user says current directory, current working directory, repo root, workspace, ".", "./", or an absolute path, treat the target as sufficiently specified. If the requested content is obvious, such as a JavaScript hello-world file, do not ask for extra content. A SINGLE task is start_task even when it has multiple steps; choose team_decompose ONLY when the user explicitly asks for parallel work (see below).',
+    '- start_task: user asks to create, add, edit, fix, implement, refactor, test, run tests, or review a SPECIFIC, BOUNDED change \u2014 such as their pending diff, staged/uncommitted changes, a named file, or a pull request. (A BROAD "review/audit the WHOLE codebase for bugs" is read-only understanding \u2192 familiarize, NOT start_task \u2014 see below.) If the user says current directory, current working directory, repo root, workspace, ".", "./", or an absolute path, treat the target as sufficiently specified. If the requested content is obvious, such as a JavaScript hello-world file, do not ask for extra content. A SINGLE task is start_task even when it has multiple steps; choose team_decompose ONLY when the user explicitly asks for parallel work (see below). This ALSO includes requests that fetch/check an external URL or search online AND write, save, create, or update local files, reports, or code (e.g. "check https://... and write a report into report.md" -> start_task).',
     '- team_decompose: user EXPLICITLY asks to split the work into MULTIPLE PARALLEL tasks or tracks, run an "agent team", do things "in parallel", or describes 2+ INDEPENDENT pieces (typically touching different files) to run concurrently. Prefer team_decompose over start_task whenever the request names an agent team or parallel/separate tracks. A single multi-step task is start_task, NOT team_decompose.',
     '- familiarize: user asks to read, inspect, understand, explain, or summarize the current project, codebase, repository, folder, files, or working directory without asking for a mutation. This ALSO covers a BROAD read-only REVIEW or AUDIT of the WHOLE repository/codebase \u2014 e.g. "review the codebase for bugs", "audit the repo for issues", "look over the whole project for problems": reviewing the ENTIRE repo for bugs/quality/security is a read-only understanding task, so it is familiarize, NOT start_task. (A BOUNDED review of a specific pending DIFF or named file is start_task instead.)',
     `- brainstorm: user asks to explore options, tradeoffs, risks, architecture directions, or recommendations for THIS project's design or implementation before deciding what to design or implement. brainstorm is NOT for opinions or analysis of a web page, article, or answer from earlier in this session \u2014 that is advisory_response. Use brainstorm for exploratory prompts such as "brainstorm ways to build offline support" or "compare approaches to create a local context store". Do NOT use brainstorm when the user asks for immediate mutation, a design artifact, a hard gate, tests, review, commit, deploy, or release; choose the workflow action or ask one clarifying question.`,
-    '- browse: user asks to read/open/fetch/summarize a specific web URL (http/https), OR to look something up on the web / search online / find the latest on a topic. Put any explicit URL(s) in "browseUrls" (array) and, when there is no URL, put the search query in "browseQuery". This route fetches the page (or searches) on the user machine and answers from the content; it is NOT a familiarize (which reads the LOCAL repo) and NOT advisory_response.',
+    '- browse: user asks a read-only question to read/open/fetch/summarize a specific web URL (http/https), OR to look something up on the web / search online / find the latest on a topic, WITHOUT asking to create, write, or modify any local files. If the user asks to fetch a URL or search AND save/write/create local files or reports, choose start_task instead. Put any explicit URL(s) in "browseUrls" (array) and, when there is no URL, put the search query in "browseQuery". This route fetches the page (or searches) on the user machine and answers from the content; it is NOT a familiarize (which reads the LOCAL repo) and NOT advisory_response.',
     options?.isSubprocessRunner ? `- advisory_response: user asks a general question that does not require repository context or file changes. Put a COMPLETE, natural, conversational ANSWER to the question in the "advisory_summary" field (a full helpful reply, like a chat assistant \u2014 NOT a one-line label or a restatement of the question); explain core principles accurately: for search/pathfinding, start with the start node in the open set, use strictly standard A* terminology (open set and closed set only; never invent other sets like missed set or turn set), and compare with Dijkstra's algorithm; explain that a more accurate, higher admissible heuristic (closer to the true remaining cost) guides the search more directly to the goal and expands fewer nodes, whereas a smaller or zero heuristic (like Dijkstra's algorithm) explores in all directions and expands more nodes; a heuristic must be admissible (never overestimate the true distance) to guarantee an optimal shortest path; write all mathematical expressions in clean plain text like f(n) = g(n) + h(n) (never use LaTeX math notation, \\text{}, math mode $, or backslashes); format the entire explanation in clean, well-structured markdown prose paragraphs separated by blank lines (do not use bullet lists, numbered sub-lists, or backslash line breaks; write complete narrative paragraphs); never use tab characters or \\t; never use double quotes inside advisory_summary (use single quotes ' if quoting terms); keep "rationale" a short internal classification reason. Answer directly and warmly, e.g. "Yes \u2014 I can \u2026".` : '- advisory_response: user asks a general question or capability question. Put a concise, natural, 1-sentence direct answer or definition in "advisory_summary" (e.g. "Yes, I can write Rust" or "A* is a best-first pathfinding algorithm that expands nodes by f(n) = g(n) + h(n)"); do NOT write preambles like "Here is..." or conversational labels; keep "rationale" a short reason. The downstream local advisory engine generates the full answer.',
     options?.isSubprocessRunner ? '- FOLLOW-UP ON EARLIER CONTENT: when the user asks for your thoughts, opinion, analysis, critique, or a deeper explanation of something already fetched or answered earlier in this session (a web page that was read, a search result, a previous reply) \u2014 e.g. "I am looking for your thoughts", "what do you think about that", "go deeper on that", "is that right?" \u2014 choose advisory_response and put the COMPLETE reply in advisory_summary (no downstream answerer runs for this runner). Never brainstorm, familiarize, or browse again for such a follow-up.' : `- FOLLOW-UP ON EARLIER CONTENT: when the user asks for your thoughts, opinion, analysis, critique, or a deeper explanation of something already fetched or answered earlier in this session (a web page that was read, a search result, a previous reply) \u2014 e.g. "I am looking for your thoughts", "what do you think about that", "go deeper on that", "is that right?" \u2014 choose advisory_response with a one-sentence advisory_summary (the shell's answerer writes the full reply from the page and the conversation). Never brainstorm, familiarize, or browse again for such a follow-up.`,
     options?.isSubprocessRunner ? "- summarize_current_status: user asks what changed, what the last task did, current progress, or workflow status." : "- Questions about progress, what changed, what the last task did, or workflow status are advisory_response too: the shell attaches its own status record to the answer, so never invent task history.",
@@ -18658,6 +18658,8 @@ function renderLocalGemmaPlannerPrompt(input, options) {
     'User: "look up the React 19 release notes online" -> {"action":"browse","rationale":"web lookup","browseQuery":"React 19 release notes"}',
     'User: "what is the latest LTS version of Node.js?" -> {"action":"browse","rationale":"freshness lookup needs current web info, not stale knowledge","browseQuery":"latest LTS version Node.js"}',
     'User: "what is the current stable version of Python?" -> {"action":"browse","rationale":"current version is a freshness web lookup","browseQuery":"current stable version Python"}',
+    'User: "check https://registry.npmjs.org/@quantiya/codevibe-core/latest and write a report into report.md" -> {"action":"start_task","rationale":"check external URL and write report file"}',
+    'User: "Please use your codevibe_web_search tool to search for \\"Quantiya AI\\", then use codevibe_web_fetch to read https://quantiya.ai/ and write a 3-bullet summary of the site into a file named claude-web-test.md." -> {"action":"start_task","rationale":"search web and write summary file"}',
     `User: "fyi every FLAGS.md row should also say what the default is" (session.currentTaskState is in_progress) -> {"action":"advisory_response","rationale":"a convention stated while a task runs; acknowledge, no second task","advisory_summary":"Noted \u2014 FLAGS.md rows will also state each flag's default."}`,
     'User: "scratch that \u2014 descriptions should not end with a period" (session.currentTaskState is in_progress) -> {"action":"advisory_response","rationale":"retracts an earlier rule while a task runs","advisory_summary":"Understood \u2014 descriptions will not end with a period."}',
     'User: "also add a --cv-quiet flag to release.sh" (session.currentTaskState is in_progress) -> {"action":"start_task","rationale":"asks for a new deliverable while a task runs"}',
@@ -21326,6 +21328,57 @@ function buildCommandIntentMetadata(text2) {
   if (intent)
     return { command_intent: buildCommandIntentEnvelope(intent) };
 }
+function isWebAccessNeeded(text2) {
+  return !text2 || typeof text2 != "string" ? !1 : /https?:\/\/[^\s]+/i.test(text2) || /\bwww\.[^\s]+/i.test(text2) ? !0 : /(?:^|[.?!;])\s*(?:please\s+)?(?:implement|build|create|add|support|develop)\b[\s\S]{0,50}?\b(?:feature|functionality|function|button|capability|endpoint|command|module|ui|api|service)\b/i.test(
+    text2
+  ) || /\b(?:feature|functionality|function|capability)\b[\s\S]{0,40}?\b(?:to|that|which)\s+(?:search|browse|look\s+up)\b/i.test(
+    text2
+  ) || /(?:实现|添加|开发|支持|做个|写个)[\s\S]{0,30}?(?:功能|特性)/.test(text2) || /(?:功能|特性)[\s\S]{0,30}?(?:实现|添加|开发|支持)/.test(text2) || /(?:機能|기능)[\s\S]{0,30}?(?:実装|追加|作成|開発|구현|추가)/.test(text2) || /(?:実装|追加|作成|開発|구현|추가)[\s\S]{0,30}?(?:機能|기능)/.test(text2) ? !1 : !!(/(?:^|[.?!;])\s*(?:please\s+)?(?:search|browse)\s+(?:the\s+(?:web|internet)\b|online)(?:\s+(?:for|about)\b|\s*[,.;?!]?$)/i.test(
+    text2
+  ) || /(?:^|[.?!;])\s*(?:please\s+)?look\s+up\s+(?!where\b|how\b|who\b|why\b)[\w\s.-]{1,60}?\s+(?:online|on\s+the\s+web\b|on\s+the\s+internet\b)(?:\s+(?:for|about)\b|\s*[,.;?!]?$)/i.test(
+    text2
+  ) && !/\bonline\s+(?:checkout|users?|status|banking|store|shop|service|mode|game|player|account|system|portal|flow|documentation)\b/i.test(
+    text2
+  ) || /(?:^|[.?!;])\s*(?:please\s+)?(?:use|try|run|perform|do)\s+(?:a\s+)?(?:web|internet|online)\s+search(?:\s+(?:for|about|on)\b|\s*[,.;?!]?$)(?!\s+(?:api|service|endpoint|tests?|feature|sdk|library|component|function|code)\b)/i.test(
+    text2
+  ) || /(?:^|[.?!;])\s*(?:please\s+)?(?:google\s+(?:this|it|that)\b|search\s+(?:on\s+google|google)\s+for\b)/i.test(
+    text2
+  ) || /(?:^|[.?!;，。！？；])\s*(?:请|帮我|麻烦)?\s*(?:(?:去?上网|在网上|去官网|在官网|在官方网站)(?:搜索|查找|查阅|查一下|搜一下)(?!到|过|出|的|结果)|去网上搜(?:一下|索)|谷歌一下|(?:查阅|查找|搜索)(?:官网|官方网站)(?:的)?(?:文档|说明|api)|(?:在线|官网|联网)搜索一下)/i.test(
+    text2
+  ) || /(?:^|[.?!;])\s*(?:(?:ネット|オンライン)で\s*(?:検索して(?:みて|ください)?|調べて(?:みて|ください)?|探して(?:みて|ください)?)(?=$|[\s。、.!?])|ウェブ検索で\s*[\u4E00-\u9FFF\u30A0-\u30FF\w ]{1,20}を(?:調べて|探して))|(?:^|[.?!;])\s*[\w\s\u3040-\u30FF\u4E00-\u9FFF]{0,20}?ググ[るっ](?=$|[\s.?!;。~])/i.test(
+    text2
+  ) || /(?:^|[.?!;])\s*(?:[\w\s가-힣]{0,40}?\s+)?(?:인터넷|온라인|구글)에서\s*(?:검색해(?:봐|줘|요)|찾아(?:봐|줘)|조회해(?:봐|줘))(?=$|[\s.?!;。~])/i.test(
+    text2
+  ));
+}
+function hasFileMutationIntent(text2) {
+  if (!text2 || typeof text2 != "string") return !1;
+  let stripped = stripLeadingAgentControlToken(text2).trim(), textWithoutUrls = stripped.replace(/https?:\/\/[^\s]+/gi, " ").trim();
+  if (/\b(?:how\s+(?:to|do\s+I|can\s+I)|explain\s+how\s+to|tell\s+me\s+how\s+to)\b/i.test(stripped) || /(?:^|[.?!;])\s*(?:what\s+(?:is|are)\b|c[oó]mo\s+(?:hacer|puedo|se\s+puede|escribir|guardar|crear)|comment\s+(?:faire|écrire|sauvegarder|créer|enregistrer)|wie\s+(?:kann\s+ich|macht\s+man|schreibt\s+man|speichert\s+man|erstellt\s+man))\b/i.test(stripped) || /(?:如何|怎么|怎样|告诉我(?:如何|怎么|怎样)|解释如何|请问|什么是)/.test(stripped) || /(?:どうやって|方法(?:を(?:教えて|説明して))|やり方を教えて|でしょうか|とは(?:何|なん)ですか)/.test(stripped) || /(?:어떻게|방법을?\s*(?:알려줘|설명해줘)|법\s*설명|하는지\s*알려줘)/.test(stripped))
+    return !1;
+  if (/>{1,2}\s*[\w./-]+\b/.test(textWithoutUrls))
+    return !0;
+  let fileExt = "(?:md|markdown|txt|json|csv|ts|js|tsx|jsx|py|html|css|yaml|yml|log|sh|xml|toml|sql|env)", writeToFilePatternEn = new RegExp(
+    `\\b(?:write|save|create|dump|output|put|export|store|record|guardar|escribir|crear|enregistrer|\xE9crire|cr\xE9er|sauvegarder|speichern|schreiben|erstellen)\\b[\\s\\S]*?\\b(?:into|to|in|as|en|dans|auf|zu)\\b(?!\\s+(?:chat|console|stdout|screen|terminal)\\b)[\\s\\S]*?(?:(?:a|an|the|un|une|ein|eine|el|la)?\\s*file(?:\\s+named|\\s+called)?\\s+)?[\\w./-]+\\.${fileExt}\\b`,
+    "i"
+  ), writeToFilePatternGermanic = new RegExp(
+    `\\b(?:in|auf|zu|into|to)\\s+[\\w./-]+\\.${fileExt}[\\s\\S]*?\\b(?:speichern|schreiben|erstellen|ablegen)\\b`,
+    "i"
+  ), namedFilePatternEn = /\b(?:into|to|in|en|dans|auf|zu)\s+(?:a|an|un|une|ein|eine|el|la)?\s*file(?:\s+(?:named|called))?\s+[\w./-]+\b/i, createFilePatternEn = /\b(?:create|add|touch)\s+(?:a|an|the)?\s*(?:new\s+)?(?:file|markdown\s+file|script)\b/i, directFileVerbPatternEn = new RegExp(
+    `\\b(?:create|write|touch|add|crear|escribir|cr\xE9er|\xE9crire|erstellen)\\s+[\\w./-]+\\.${fileExt}\\b`,
+    "i"
+  ), writeToFilePatternZh = new RegExp(
+    `(?:\u5199\u5165|\u4FDD\u5B58\u5230?|\u521B\u5EFA|\u751F\u6210|\u8F93\u51FA\u5230|\u5B58\u5165|\u5BFC\u51FA\u5230?|\u8BB0\u5F55\u5230?)[\\s\\S]*?[\\w./-]+\\.${fileExt}\\b`,
+    "i"
+  ), writeToFilePatternJa = new RegExp(
+    `(?:[\\w./-]+\\.${fileExt}[\\s\\S]*?(?:\u306B|\u3078)?\\s*(?:\u66F8\u304D\u51FA|\u4FDD\u5B58|\u4F5C\u6210|\u751F\u6210|\u51FA\u529B|\u8A18\u9332|\u30A8\u30AF\u30B9\u30DD\u30FC\u30C8)|(?:\u66F8\u304D\u51FA|\u4FDD\u5B58|\u4F5C\u6210|\u751F\u6210|\u51FA\u529B|\u8A18\u9332|\u30A8\u30AF\u30B9\u30DD\u30FC\u30C8)[\\s\\S]*?[\\w./-]+\\.${fileExt})`,
+    "i"
+  ), writeToFilePatternKo = new RegExp(
+    `(?:[\\w./-]+\\.${fileExt}[\\s\\S]*?(?:\uC5D0|\uC73C\uB85C|\uB85C)?\\s*(?:\uC800\uC7A5|\uC791\uC131|\uC0DD\uC131|\uAE30\uB85D|\uCD9C\uB825|\uB0B4\uBCF4\uB0B4\uAE30)|(?:\uC800\uC7A5|\uC791\uC131|\uC0DD\uC131|\uAE30\uB85D|\uCD9C\uB825|\uB0B4\uBCF4\uB0B4\uAE30)[\\s\\S]*?[\\w./-]+\\.${fileExt})`,
+    "i"
+  );
+  return writeToFilePatternEn.test(textWithoutUrls) || writeToFilePatternGermanic.test(textWithoutUrls) || namedFilePatternEn.test(textWithoutUrls) || createFilePatternEn.test(textWithoutUrls) || directFileVerbPatternEn.test(textWithoutUrls) || writeToFilePatternZh.test(textWithoutUrls) || writeToFilePatternJa.test(textWithoutUrls) || writeToFilePatternKo.test(textWithoutUrls);
+}
 
 // src/orchestration-shell/route-browse.ts
 var RETAINED_PAGE_MAX_CHARS = 12e4, NO_MODEL_PREFIX = "Local CodeVibe model is required to read and summarize web pages.", RUN_INSTALL = "Run `codevibe model install` from a Pro/Max account, then ask again. No hosted model was called and no code was changed.";
@@ -21390,17 +21443,29 @@ function fetchErrorMessage(err, url) {
 async function readUrl(deps, runner, url) {
   let { store, userPrompt, signal } = deps, dispUrl = sanitizeForTerminal(url);
   advise(store, `Reading ${dispUrl}\u2026`);
-  let body, finalUrl, fetch2 = deps.guardedFetchFn ?? guardedFetch;
+  let body, finalUrl, contentType = "", fetch2 = deps.guardedFetchFn ?? guardedFetch;
   try {
-    let res = await fetch2(url, signal);
-    body = res.body, finalUrl = res.finalUrl;
+    let res = await fetch2(url, signal, { allowJson: !0 });
+    body = res.body, finalUrl = res.finalUrl, contentType = res.contentType;
   } catch (err) {
     if (signal?.aborted) return;
     let suffix = deps.delegateAnswer ? " The mentioned agent was not consulted." : "";
     err instanceof FetchError ? advise(store, `${fetchErrorMessage(err, dispUrl)}${suffix}`) : advise(store, `Couldn't read ${dispUrl} (${sanitizeForTerminal(err.message)}). No code was changed.${suffix}`);
     return;
   }
-  let dispFinal = sanitizeForTerminal(finalUrl), { title, text: text2 } = await htmlToText(body), safeTitle = sanitizeForTerminal(title).slice(0, 200), fullSafeText = sanitizeForTerminal(text2);
+  let dispFinal = sanitizeForTerminal(finalUrl), title = dispFinal, text2 = "";
+  if (contentType.toLowerCase().includes("application/json"))
+    try {
+      let parsed = JSON.parse(body);
+      text2 = JSON.stringify(parsed, null, 2);
+    } catch {
+      text2 = body;
+    }
+  else {
+    let extracted = await htmlToText(body);
+    title = extracted.title || dispFinal, text2 = extracted.text || "";
+  }
+  let safeTitle = sanitizeForTerminal(title).slice(0, 200), fullSafeText = sanitizeForTerminal(text2);
   if (signal?.aborted) return;
   if (!fullSafeText.trim()) {
     let suffix = deps.delegateAnswer ? " The mentioned agent was not consulted." : "";
@@ -21529,7 +21594,19 @@ async function readSearchResults(deps, runner, query, results) {
   advise(store, `Reading top ${targetResults.length} web pages in parallel\u2026`);
   let fetch2 = deps.guardedFetchFn ?? guardedFetch, fetchPromises = targetResults.map(async (res) => {
     try {
-      let fetched = await fetch2(res.url, signal), { title, text: text2 } = await htmlToText(fetched.body), safeTitle = sanitizeForTerminal(title || res.title || "").slice(0, 200), rawText = text2 || "";
+      let fetched = await fetch2(res.url, signal, { allowJson: !0 }), title = res.title || "", text2 = "";
+      if ((fetched.contentType || "").toLowerCase().includes("application/json"))
+        try {
+          let parsed = JSON.parse(fetched.body);
+          text2 = JSON.stringify(parsed, null, 2);
+        } catch {
+          text2 = fetched.body;
+        }
+      else {
+        let extracted = await htmlToText(fetched.body);
+        title = extracted.title || title, text2 = extracted.text || "";
+      }
+      let safeTitle = sanitizeForTerminal(title).slice(0, 200), rawText = text2 || "";
       return rawText.trim() ? {
         finalUrl: fetched.finalUrl,
         safeTitle,
@@ -31273,7 +31350,7 @@ function stripAgyWebPlugin(workdir) {
 function buildImplementorArgv(agent, mode, workdir, options) {
   switch (agent) {
     case "CLAUDE": {
-      if (process.env.CODEVIBE_ENABLE_AGENT_WEB === "1" && !!options?.mcpConfigPath) {
+      if (!!options?.mcpConfigPath) {
         let disallowedTools = mode === "plan" ? "WebFetch,WebSearch,Bash,Agent,Task,Workflow,SendMessage,ListAgents" : "WebFetch,WebSearch,Agent,Task,Workflow,SendMessage,ListAgents", baseTools = mode === "plan" ? "Read,Grep,Glob" : "Read,Grep,Glob,Edit,Write,Bash", allowedTools = `${baseTools},mcp__codevibe-web__codevibe_web_search,mcp__codevibe-web__codevibe_web_fetch`;
         return {
           argv: [
@@ -31310,7 +31387,7 @@ function buildImplementorArgv(agent, mode, workdir, options) {
       let sandbox = mode === "plan" ? "read-only" : "workspace-write", lastMessagePath = import_node_path.default.join(
         import_node_os.default.tmpdir(),
         `quorum-impl-codex-${process.pid}-${(0, import_uuid4.v4)()}.txt`
-      ), webEnabled = process.env.CODEVIBE_ENABLE_AGENT_WEB === "1" && !!options?.mcpConfigPath, mcpServer = webEnabled ? extractMcpServerConfig(options?.mcpConfigPath) : null;
+      ), webEnabled = !!options?.mcpConfigPath, mcpServer = webEnabled ? extractMcpServerConfig(options?.mcpConfigPath) : null;
       return webEnabled && mcpServer ? {
         argv: [
           "codex",
@@ -31360,7 +31437,7 @@ function buildImplementorArgv(agent, mode, workdir, options) {
         throw new Error(
           "buildImplementorArgv: ANTIGRAVITY requires an absolute workdir (agy is workspace-centric \u2014 --add-dir is its only view of the tree); the call site must thread it (AGY-2.0 D3)"
         );
-      let webEnabled = process.env.CODEVIBE_ENABLE_AGENT_WEB === "1" && !!options?.mcpConfigPath, mcpServer = webEnabled ? extractMcpServerConfig(options?.mcpConfigPath) : null;
+      let webEnabled = !!options?.mcpConfigPath, mcpServer = webEnabled ? extractMcpServerConfig(options?.mcpConfigPath) : null;
       return webEnabled && mcpServer && setupAgyWebPlugin(workdir, mcpServer), {
         argv: [...agyImplementorArgvPrefix(mode), workdir, "--print", ""],
         capture: { kind: "stdout" }
@@ -47859,7 +47936,7 @@ var LocalExecutorImpl = class {
         "none"
       ), { args, substrateEngaged: !1 };
     }
-    let result = await this.substrateEngager({
+    let isWebActive = args.webTurnActive === !0, result = await this.substrateEngager({
       taskId: effectiveTaskId,
       agentKind,
       workdir: args.workingDir,
@@ -47868,7 +47945,8 @@ var LocalExecutorImpl = class {
       // A1d (design §8.1) — thread the spawn's confinement demand so the engager
       // can build the WRITE-CONFINED resolver row for a broker-less agent
       // (GEMINI/ANTIGRAVITY) rather than immediately returning `reduced_trust`.
-      requireConfined: args.requireConfined === !0
+      requireConfined: args.requireConfined === !0,
+      webBrowsingActive: isWebActive
     });
     if (result.mode === "reduced_trust") {
       if (args.requireConfined)
@@ -57040,6 +57118,7 @@ var QuorumLoop = class _QuorumLoop {
      * are removed with the task's other per-task state at its terminal cleanup.
      */
     this.singleTaskContextByTask = /* @__PURE__ */ new Map();
+    this.webAccessByTask = /* @__PURE__ */ new Map();
     /**
      * CP-1.f revise-context fix (dogfood task 2ac68708, 2026-06-11) — the BINDING
      * user-requested changes for a task, accumulated across ALL revise rounds.
@@ -58306,7 +58385,7 @@ var QuorumLoop = class _QuorumLoop {
       })).workflowState;
     } catch (err) {
       let wasNewest = this.activeTaskId === taskId, restoreTo = previousActive && this.singleTaskContextByTask.has(previousActive.taskId) ? previousActive : null;
-      wasNewest && (this.activeTaskId = restoreTo?.taskId ?? null, this.activeBrief = restoreTo?.brief ?? null, restoreTo && (this.activeImplementorAgent = restoreTo.agent)), this.singleTaskContextByTask.delete(taskId), this.startTasksInFlight.delete(taskId);
+      wasNewest && (this.activeTaskId = restoreTo?.taskId ?? null, this.activeBrief = restoreTo?.brief ?? null, restoreTo && (this.activeImplementorAgent = restoreTo.agent)), this.singleTaskContextByTask.delete(taskId), this.webAccessByTask.delete(taskId), this.startTasksInFlight.delete(taskId);
       for (let i = this.pendingGateDispatches.length - 1; i >= 0; i--) {
         let pending = this.pendingGateDispatches[i];
         (pending.envelopeTaskId === taskId || !pending.envelopeTaskId && wasNewest) && this.pendingGateDispatches.splice(i, 1);
@@ -58942,8 +59021,12 @@ ${section}`);
           settlePending = resolve23;
         }),
         ...args.teamAuthority ? { teamAuthority: args.teamAuthority } : {}
-      };
-      if (process.env.CODEVIBE_ENABLE_AGENT_WEB === "1" && (args.agent === "CLAUDE" || args.agent === "ANTIGRAVITY"))
+      }, needsWeb = this.webAccessByTask.get(args.taskId);
+      if (needsWeb === void 0) {
+        let originalPrompt = this.singleTaskContextByTask.get(args.taskId)?.brief ?? this.activeBriefByTask.get(args.taskId)?.brief ?? (args.roundNumber === 0 ? args.brief : this.activeBrief ?? "");
+        needsWeb = isWebAccessNeeded(originalPrompt), this.webAccessByTask.set(args.taskId, needsWeb);
+      }
+      if (needsWeb && (args.agent === "CLAUDE" || args.agent === "ANTIGRAVITY"))
         try {
           agentWebTurn = await startAgentWebTurn({
             sessionId: this.deps.session.sessionId,
@@ -58981,6 +59064,7 @@ ${section}`);
           // (`setActiveTaskId`), so the LE's `args.taskId ?? this.taskId` fallback
           // yields byte-identical single-impl substrate engagement.
           taskId: args.taskId,
+          webTurnActive: !!agentWebTurn?.mcpConfigPath,
           timeoutMs: null,
           stdinTty: !0,
           // PHASE-CP-10-MIN (#585) — the cooperative abort signal (#C10M-16).
@@ -60203,7 +60287,7 @@ ${section}`);
       ));
     }
     for (let taskId of taskIds)
-      this.activeBriefByTask.get(taskId)?.taskGroupId === taskGroupId && (this.activeBriefByTask.delete(taskId), this.activeAttachmentsByTask.delete(taskId));
+      this.activeBriefByTask.get(taskId)?.taskGroupId === taskGroupId && (this.activeBriefByTask.delete(taskId), this.activeAttachmentsByTask.delete(taskId), this.webAccessByTask.delete(taskId));
     if (this.teamAttachmentsByGroup.delete(taskGroupId), failures.length > 0) {
       try {
         this.surfaceHalt(
@@ -60281,7 +60365,7 @@ ${section}`);
         });
         return;
       }
-    if (opts?.preserveReviseContext || (this.userNotesByTask.delete(taskId), this.reviewScopeResetTasks.delete(taskId), this.reviewScopeResetEligibleTasks.delete(taskId), this.roundHistoryByTask.delete(taskId), opts?.taskContinues !== !0 && this.singleTaskContextByTask.delete(taskId), this.rationaleByTask.delete(taskId), this.taskDegradedMetadataByTask.delete(taskId), this.expectedRosterByTask.delete(taskId), this.activeGateByTaskId.delete(taskId), this.conflictedSeatsByTask.delete(taskId), this.nonApprovedSeatsByTask.delete(taskId), this.restartFenceByTaskId.delete(taskId), appendContextItem(this.deps.session.sessionId, {
+    if (opts?.preserveReviseContext || (this.userNotesByTask.delete(taskId), this.reviewScopeResetTasks.delete(taskId), this.reviewScopeResetEligibleTasks.delete(taskId), this.roundHistoryByTask.delete(taskId), opts?.taskContinues !== !0 && (this.singleTaskContextByTask.delete(taskId), this.webAccessByTask.delete(taskId)), this.rationaleByTask.delete(taskId), this.taskDegradedMetadataByTask.delete(taskId), this.expectedRosterByTask.delete(taskId), this.activeGateByTaskId.delete(taskId), this.conflictedSeatsByTask.delete(taskId), this.nonApprovedSeatsByTask.delete(taskId), this.restartFenceByTaskId.delete(taskId), appendContextItem(this.deps.session.sessionId, {
       kind: "verdict",
       author: { role: "engine" },
       sensitivity: "user",
@@ -60362,7 +60446,7 @@ ${section}`);
           error: err?.message
         }), historySnapshot = null;
       }
-      this.userNotesByTask.delete(taskId), this.reviewScopeResetTasks.delete(taskId), this.reviewScopeResetEligibleTasks.delete(taskId), this.roundHistoryByTask.delete(taskId), this.singleTaskContextByTask.delete(taskId), this.rationaleByTask.delete(taskId), this.taskDegradedMetadataByTask.delete(taskId), this.expectedRosterByTask.delete(taskId), this.activeGateByTaskId.delete(taskId), this.conflictedSeatsByTask.delete(taskId), this.nonApprovedSeatsByTask.delete(taskId), this.restartFenceByTaskId.delete(taskId);
+      this.userNotesByTask.delete(taskId), this.reviewScopeResetTasks.delete(taskId), this.reviewScopeResetEligibleTasks.delete(taskId), this.roundHistoryByTask.delete(taskId), this.singleTaskContextByTask.delete(taskId), this.webAccessByTask.delete(taskId), this.rationaleByTask.delete(taskId), this.taskDegradedMetadataByTask.delete(taskId), this.expectedRosterByTask.delete(taskId), this.activeGateByTaskId.delete(taskId), this.conflictedSeatsByTask.delete(taskId), this.nonApprovedSeatsByTask.delete(taskId), this.restartFenceByTaskId.delete(taskId);
       let shadow = this.shadowsByTask.get(taskId);
       if (!shadow) {
         logger.info("[QuorumLoop] promote no-op \u2014 no in-memory shadow for task", { taskId });
@@ -68776,7 +68860,10 @@ async function handleShellUserInput(deps) {
   }, decision, showClassifySpinner = store.getState().progress === null;
   showClassifySpinner && store.dispatch({ type: "TASK_PROGRESS", event: { phase: "planner_classifying" } });
   try {
-    decision = await dispatchClassify(plannerInput), isLocalPlannerRuntime(args) && decision.action === "start_task" && plannerInput.clarifications.length === 0 && isDestructiveFileRequest(plannerInput.prompt) && (logger.warn(
+    decision = await dispatchClassify(plannerInput), isLocalPlannerRuntime(args) && decision.action === "browse" && hasFileMutationIntent(plannerInput.prompt) && (decision = {
+      action: "start_task",
+      rationale: decision.rationale ? `${decision.rationale} (promoted to start_task due to file mutation intent)` : "web request with file mutation intent"
+    }), isLocalPlannerRuntime(args) && decision.action === "start_task" && plannerInput.clarifications.length === 0 && isDestructiveFileRequest(plannerInput.prompt) && (logger.warn(
       "[orchestration-shell] P43 backstop: a destructive file request was classified start_task without a confirmation this turn; asking first",
       { rationale: decision.rationale }
     ), decision = {
@@ -72365,6 +72452,14 @@ async function assertAuditOutsideWorkdir(auditPath, workdir) {
   return resolvedAuditPath;
 }
 async function engageSubstrate(input) {
+  if (input.webBrowsingActive)
+    return {
+      mode: "reduced_trust",
+      reducedTrust: !0,
+      reducedTrustReason: `Agent web browsing active for ${input.agentKind} \u2014 running in reduced-trust mode with shadow-diff capture and guarded web tools`,
+      teardown: async () => {
+      }
+    };
   let provider = providerForAgent(input.agentKind);
   if (provider === null)
     return input.requireConfined ? engageWriteConfinedResolverSandbox(input) : {
@@ -74904,6 +74999,7 @@ async function buildQuorumLoopExecutor(args) {
     userContextFn: async () => ""
   }, localExecutor = new LocalExecutorImpl({
     sessionId: session.sessionId,
+    logger,
     // CP-1.f Hybrid authority split (mirrors the team LE) — the DESKTOP seeds
     // the implementor command allowlist so `enforceCommand` permits the spawn;
     // write/read/network stay empty (the engine authorizes PATH scopes via a
@@ -75145,6 +75241,7 @@ async function buildTeamLocalExecutor(args) {
     userContextFn: async () => ""
   }, localExecutor = new LocalExecutorImpl({
     sessionId: session.sessionId,
+    logger,
     initialScope,
     baseCtx: {
       sessionId: session.sessionId,

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/command-intent.d.ts

@@ -53,4 +53,22 @@ export declare function extractAllAgentMentionIntents(text: string): AgentMentio
 export declare function stripLeadingAgentControlToken(text: string): string;
 export declare function buildCommandIntentEnvelope(intent: AgentMentionIntent): CommandIntentEnvelope;
 export declare function buildCommandIntentMetadata(text: string): CommandIntentMetadata | undefined;
+/**
+ * Detects whether a prompt or brief expresses need for external web browsing or online searching.
+ * Used by QuorumLoop to dynamically attach web tools ONLY when needed, preserving full
+ * sandboxing for normal non-web tasks.
+ *
+ * Supports language-agnostic URLs, as well as English, Chinese, and Japanese web search intents.
+ */
+export declare function isWebAccessNeeded(text: string): boolean;
+/**
+ * Detects whether a prompt expresses intent to create, write, save, or modify local files/reports,
+ * as opposed to a purely read-only conversational request.
+ * Used as a backstop when classifying or routing web requests so that prompts asking to fetch/search
+ * AND write/save to a local file route to `start_task` (implementor execution) instead of desktop `browse`.
+ *
+ * Designed to handle English, Chinese, Japanese, Korean, European languages, and universal structural patterns
+ * (e.g. file targets and shell redirection), while accurately filtering out informational "how-to" / conceptual questions.
+ */
+export declare function hasFileMutationIntent(text: string): boolean;
 export {};

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/quorum-loop.d.ts

@@ -690,6 +690,7 @@ export declare class QuorumLoop {
      * are removed with the task's other per-task state at its terminal cleanup.
      */
     private readonly singleTaskContextByTask;
+    private readonly webAccessByTask;
     /**
      * CP-1.f revise-context fix (dogfood task 2ac68708, 2026-06-11) — the BINDING
      * user-requested changes for a task, accumulated across ALL revise rounds.

package/node_modules/@quantiya/codevibe-core/dist/substrate-launch/engage-substrate.d.ts

@@ -80,6 +80,8 @@ export interface EngageSubstrateInput {
     claudeScratchHostRoot?: string;
     /** Safe locale source for the sanitized env (default: none). */
     localeSource?: Readonly<Record<string, string | undefined>>;
+    /** If true, the turn has active web tools (MCP bridge) and runs in reduced-trust mode. */
+    webBrowsingActive?: boolean;
 }
 /**
  * The substrate-engaged result: the spawn seam runs the agent via

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.36",
+  "version": "2.0.37",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-claude-plugin",
-  "version": "2.0.41",
+  "version": "2.0.42",
   "description": "Control Claude Code from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -48,7 +48,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "^2.0.36",
+    "@quantiya/codevibe-core": "^2.0.37",
     "@quantiya/quorum-core": "^1.0.1",
     "dotenv": "^16.6.1",
     "express": "^5.1.0",