@quantiya/codevibe-claude-plugin 2.0.73 → 2.0.75

package/node_modules/@quantiya/codevibe-core/dist/appsync/appsync-client.d.ts

@@ -762,10 +762,6 @@ export declare class AppSyncClient {
      * added wait. Retain the server's earliest retry time after cancellation or
      * exhaustion so a later caller cannot restart I/O before that time. */
     private readCompanionSyncState;
-    /** Reuse only the server-unexpired protocol selection, never its entitlement
-     * or usage as admission authority. Every selected cloud operation still
-     * authorizes itself. Explicit status/quota refreshes remain fresh reads. */
-    private getCompanionSyncRoute;
     /** Subscribe to validated reads already performed by this client. No new
      * request, persistent journal, producer grant or retry is created here. */
     subscribeCompanionSyncState(userId: string, listener: (state: CompanionSyncState | null) => void): () => void;
@@ -779,8 +775,8 @@ export declare class AppSyncClient {
     private resetSyncProducerAuthority;
     private resetCompanionSyncDisplay;
     private publishCompanionSyncDisplay;
-    /** Signed closed safety fact, independent of customer event quota. Only an
-     * affirmative cloud LEGACY selection permits the caller's legacy sink.
+    /** Signed closed safety fact. The cloud owns availability/accounting policy;
+     * no client status read or transport selection precedes this operation.
      * Success confirms canonical persistence, never phone/render delivery. */
     reportSecurityPostureIfSelected(sessionScope: {
         sessionId: string;
@@ -872,17 +868,18 @@ export declare class AppSyncClient {
         ledger: ToolActivityLedger;
     }): Promise<void>;
     /**
-     * Provider startup uses cloud routing, never a local tier/flag or an error
-     * fallback. A transport is generation-bound for its entire lifetime. Cutover
-     * and rollback must drain/restart the producer; they cannot reinterpret its
-     * sealed source windows as a different protocol.
+     * Both producer formats use the existing createEvent API. Retained signed
+     * sources keep their original generation and bytes; legacy sessions keep
+     * their supported request shape. Neither format selects accounting policy.
      */
     selectToolActivityTransport(options: {
         sessionId: string;
         root?: string;
         legacyTransport: ToolActivityTransport;
     }): Promise<ToolActivityTransport>;
-    /** Shared cloud-selected routing for tools and ordinary native sources. */
+    /** Prepare request format from session identity, never quota/control mode.
+     * SDK tags remain temporarily for existing source owners. They identify
+     * journal formats, not different APIs or accounting policies. */
     selectCompanionSourceTransport(options: {
         sessionId: string;
         root?: string;
@@ -897,6 +894,9 @@ export declare class AppSyncClient {
         getEncryptionContext(): Promise<ToolActivitySyncEncryption>;
         prepareEvent(input: CreateEventInput, operationId: string): Promise<CreateDesktopSyncEventInput>;
     }>;
+    /** An ordinary subscription/reader is not authority to sign as the creator.
+     * Read the existing identity only; never mint a replacement for this check. */
+    private canSignDesktopSession;
     /** Shared E1 producer adapter. The legacy encryption factory runs only after
      * affirmative cloud LEGACY selection. V2 encrypts inside the durable source
      * factory and never maps a quota omission to a successful cloud publication. */
@@ -928,7 +928,7 @@ export declare class AppSyncClient {
     }, legacy: () => Promise<boolean>, options?: {
         root?: string;
     }): Promise<boolean>;
-    private resolvePromptByProtocol;
+    private resolveOwnedPrompt;
     private finishPromptResolution;
     /** Explicit session-owned restart recovery. Inventory is bounded by the
      * account store's 256-file cap; empty inventory does no cloud I/O. Reuses
@@ -1000,11 +1000,10 @@ export declare class AppSyncClient {
     /** Monotonic control transition; safe retry means re-read canonical status,
      * not retrying the provider input or manufacturing a full Event response. */
     updateDesktopSyncEventStatus(input: UpdateDesktopSyncStatusInput, signal?: AbortSignal): Promise<SyncStatusReceipt>;
-    /** One budgeted liveness operation, never a legacy fallback. The producer
-     * must persist each receipt/progress before advancing its refresh batch. */
+    /** Compatibility helper over the existing batch API; no expiry is invented. */
     refreshDesktopSyncPrompt(promptId: string, signal?: AbortSignal): Promise<SyncPromptRetentionReceipt>;
-    /** Producer-facing batch: V2 keeps exact per-incarnation progress; the
-     * legacy protocol retains its existing chunked endpoint until cutover. */
+    /** One canonical batch route. Retained generations identify only the local
+     * re-raise journal; they cannot select a cloud API or accounting policy. */
     refreshSessionOpenPromptTtl(options: {
         sessionId: string;
         promptIds: readonly string[];
@@ -1041,7 +1040,7 @@ export declare class AppSyncClient {
     getSession(sessionId: string): Promise<Session | null>;
     /** The workspace owner retains its existing durable outbox. Never put a
      * second journal around it, re-encrypt it, or choose the current generation.
-     * Quota omission is a canonical ACK, not a synthetic Event or a retry queue.
+     * Existing createEvent owns cloud policy and returns its authenticated Event.
      */
     submitWorkspaceOutcome(value: CreateEventInput, options?: WorkspaceOutcomeSubmissionOptions): Promise<WorkspaceOutcomeReceipt>;
     /**
@@ -1057,7 +1056,7 @@ export declare class AppSyncClient {
      * row/Event had already aged out — the caller re-raises those (§6a-4
      * return-driven re-raise). No-ops on an empty list (no network call).
      */
-    refreshOpenPromptTtl(promptIds: string[]): Promise<string[]>;
+    refreshOpenPromptTtl(promptIds: string[], signal?: AbortSignal): Promise<string[]>;
     /**
      * Update event status
      */
@@ -1283,6 +1282,45 @@ export declare class AppSyncClient {
         serverLatencyMs: number;
         providerUsed: string;
     }>;
+    /**
+     * Planner parity (codevibe-backend docs/2.0/PLANNER-RUNTIME-PARITY-DESIGN.md §4.1) — classify a
+     * prompt core's shared renderer produced. `encryptedPrompt` is AES-GCM ciphertext under the
+     * session key; `responseSchema` is forwarded by the server only when allow-listed. Returns the
+     * RAW model text, encrypted. Errors surface as `AppSyncGraphQLError` whose `responseMessage`
+     * starts with a bracketed code (`[BudgetExceeded] …`); the hosted runner maps them.
+     */
+    classifyRenderedPlannerPrompt(input: {
+        sessionId: string;
+        encryptedPrompt: string;
+        responseSchema?: string;
+        maxOutputTokens: number;
+    }, signal?: AbortSignal): Promise<{
+        encryptedOutput: string;
+        finishReason: 'STOP' | 'LENGTH' | null;
+        promptTokens: number | null;
+        outputTokens: number | null;
+    }>;
+    /**
+     * Planner parity §4.2 — `generatePlannerAdvisory` in client-rendered mode: no server preamble,
+     * the hosted image capability (≤ 8 images, PNG/JPEG/GIF/BMP/WEBP, 4,500,000 total ciphertext),
+     * and the mode's extra output fields (a missing `finishReason` means a backend that predates
+     * the mode; the hosted runner fails closed on it).
+     */
+    generatePlannerAdvisoryRendered(input: {
+        sessionId: string;
+        prompt: string;
+        images?: string[];
+        maxTokens: number;
+        temperature: number;
+        responseFormat: 'TEXT' | 'JSON_OBJECT';
+    }, signal?: AbortSignal): Promise<{
+        advisoryText: string;
+        serverLatencyMs: number;
+        providerUsed: string;
+        finishReason: 'STOP' | 'LENGTH' | null;
+        promptTokens: number | null;
+        outputTokens: number | null;
+    }>;
     /**
      * CP-8 min Stage 1 R1 HIGH-1 closure (Hendry-approved 2026-05-19).
      *
@@ -1328,9 +1366,9 @@ export declare class AppSyncClient {
      * result is deliberately not subscribed: it fences the submitting client but
      * never stands in for the durable GATE_RESOLUTION Event.
      */
-    submitGateDecisionV2(request: CanonicalGateDecisionRequest, canonicalRequestHash: string): Promise<DecisionSubmissionResult>;
+    submitGateDecision(request: CanonicalGateDecisionRequest, canonicalRequestHash: string): Promise<DecisionSubmissionResult>;
     /** P16/P20 TaskGroup-native decision admission (CLAIM, not workflow COMMIT). */
-    submitGroupDecisionV2(request: CanonicalGroupDecisionRequest, canonicalRequestHash: string): Promise<DecisionSubmissionResult>;
+    submitGroupDecision(request: CanonicalGroupDecisionRequest, canonicalRequestHash: string): Promise<DecisionSubmissionResult>;
     authorizeGroupTerminalOperation(input: {
         sessionId: string;
         taskGroupId: string;
@@ -1385,7 +1423,7 @@ export declare class AppSyncClient {
         operationHash: string;
         operationReceiptHash: string;
     }): Promise<GroupOperationResult>;
-    commitGroupDecisionV2(input: {
+    commitGroupDecision(input: {
         sessionId: string;
         taskGroupId: string;
         decisionClaimId: string;
@@ -1397,8 +1435,9 @@ export declare class AppSyncClient {
         promptId: string;
         decisionAttemptId: string;
     }): Promise<DecisionAttemptResult>;
-    /** Cloud-selected recovery protocol. V2 requires the session owner's known
-     * generation and never falls back to a live Session lookup or legacy Event. */
+    /** One canonical recovery API. The cloud verifies owner/history authority
+     * and, when supplied, the exact generation. No accounting-route/status read
+     * or second delivery transport may block decision recovery. */
     getGateResolution(input: {
         sessionId: string;
         promptId: string;
@@ -1776,7 +1815,6 @@ export declare class AppSyncClient {
     private ownSyncReader;
     private trackSyncClosure;
     private joinSyncSubscriptionClosures;
-    private syncHistoryForSession;
     /**
      * Subscribe to events for a session
      */

package/node_modules/@quantiya/codevibe-core/dist/appsync/queries.d.ts

@@ -4,7 +4,6 @@ export declare const queries: {
     listEvents: string;
     listSupervisionEvents: string;
     getDecisionAttempt: string;
-    getGateResolutionV2: string;
     getGateResolution: string;
     listOpenPrompts: string;
     listUserDeviceKeys: string;
@@ -35,17 +34,12 @@ export declare const mutations: {
     putContextItem: string;
     createSession: string;
     updateSession: string;
-    createEventV2: string;
-    recordWorkspaceOutcomeV2: string;
-    updateEventV2: string;
+    updateEvent: string;
     createEvent: string;
     refreshOpenPromptTtl: string;
-    refreshOpenPromptTtlV2: string;
-    resolveOpenPromptV2: string;
-    reportSecurityPostureV2: string;
-    confirmSessionRetirementV2: string;
+    reportSecurityPosture: string;
+    confirmSessionRetirement: string;
     updateEventStatus: string;
-    updateEventStatusV2: string;
     registerDeviceKey: string;
     grantSessionKey: string;
     getAttachmentDownloadUrl: string;
@@ -55,16 +49,18 @@ export declare const mutations: {
     classifyPlannerPrompt: string;
     pingPlanner: string;
     generatePlannerAdvisory: string;
+    classifyRenderedPlannerPrompt: string;
+    generatePlannerAdvisoryRendered: string;
     applyUserDecision: string;
-    submitGateDecisionV2: string;
-    submitGroupDecisionV2: string;
+    submitGateDecision: string;
+    submitGroupDecision: string;
     authorizeGroupTerminalOperation: string;
     beginGroupPromotion: string;
     completeGroupPromotion: string;
     beginGroupRevert: string;
     completeGroupRevert: string;
     prepareGroupKeep: string;
-    commitGroupDecisionV2: string;
+    commitGroupDecision: string;
     recordContinuationPacketWritten: string;
     createTaskGroup: string;
     submitMergeGateVerdict: string;

package/node_modules/@quantiya/codevibe-core/dist/appsync/sync-event-client.d.ts

@@ -66,7 +66,7 @@ export interface SyncStatusReceipt {
 export type SyncPromptRetentionReceipt = {
     promptId: string;
     status: 'REFRESHED';
-    expiresAt: number;
+    expiresAt?: number;
 } | {
     promptId: string;
     status: 'RERAISE_REQUIRED';
@@ -82,8 +82,8 @@ export interface SyncEventReceipt {
     emittedBy: 'IMPLEMENTOR' | 'SYSTEM' | 'USER';
 }
 export declare class SyncEventClientError extends Error {
-    readonly code: 'INVALID_SYNC_INPUT' | 'INVALID_SYNC_RECEIPT' | 'INVALID_SYNC_STATE' | 'SYNC_IDENTITY_UNAVAILABLE' | 'SYNC_ACCOUNT_CHANGED' | 'SYNC_PRODUCER_FROZEN' | 'SYNC_SESSION_UNAVAILABLE' | 'SYNC_SESSION_GENERATION_CHANGED' | 'SYNC_SESSION_KEY_UNAVAILABLE';
-    constructor(code: 'INVALID_SYNC_INPUT' | 'INVALID_SYNC_RECEIPT' | 'INVALID_SYNC_STATE' | 'SYNC_IDENTITY_UNAVAILABLE' | 'SYNC_ACCOUNT_CHANGED' | 'SYNC_PRODUCER_FROZEN' | 'SYNC_SESSION_UNAVAILABLE' | 'SYNC_SESSION_GENERATION_CHANGED' | 'SYNC_SESSION_KEY_UNAVAILABLE');
+    readonly code: 'INVALID_SYNC_INPUT' | 'INVALID_SYNC_RECEIPT' | 'INVALID_SYNC_STATE' | 'SYNC_IDENTITY_UNAVAILABLE' | 'SYNC_ACCOUNT_CHANGED' | 'SYNC_PRODUCER_FROZEN' | 'SYNC_SESSION_UNAVAILABLE' | 'SYNC_SESSION_GENERATION_CHANGED' | 'SYNC_SESSION_KEY_UNAVAILABLE' | 'SYNC_INBOUND_RECOVERY_REQUIRED' | 'SYNC_INPUT_RECOVERY_INCOMPLETE';
+    constructor(code: 'INVALID_SYNC_INPUT' | 'INVALID_SYNC_RECEIPT' | 'INVALID_SYNC_STATE' | 'SYNC_IDENTITY_UNAVAILABLE' | 'SYNC_ACCOUNT_CHANGED' | 'SYNC_PRODUCER_FROZEN' | 'SYNC_SESSION_UNAVAILABLE' | 'SYNC_SESSION_GENERATION_CHANGED' | 'SYNC_SESSION_KEY_UNAVAILABLE' | 'SYNC_INBOUND_RECOVERY_REQUIRED' | 'SYNC_INPUT_RECOVERY_INCOMPLETE');
 }
 export declare const SYNC_PROMPT_RAISE_FIELDS: readonly ["promptId", "ownerToken", "producerKind", "mobileActionable"];
 /** Same closed commitment as the backend. No key/transport work is performed. */

package/node_modules/@quantiya/codevibe-core/dist/appsync/sync-inbound-journal.d.ts

@@ -104,6 +104,8 @@ export interface DesktopInboundJournal {
         pending: readonly SyncRecoveryTarget[];
         uncertain: number;
     }>;
+    /** Read-only compatibility exclusion set, including uncertain handoffs. */
+    retainedCoordinates(): Promise<readonly SyncRecoveryTarget[]>;
     /** Coordinates only. Their payload must never be sent to a provider again. */
     pendingAcknowledgements(): Promise<readonly SyncRecoveryTarget[]>;
     /** Only a completed local handoff authorizes retrying its status write.

package/node_modules/@quantiya/codevibe-core/dist/appsync/sync-live-connection.d.ts

@@ -1,5 +1,5 @@
 import WebSocket from 'ws';
-import { DesktopSyncReadClient, type SyncReadEvent, type SyncRecoveryTarget, type SyncExecutedInput } from './sync-read-client';
+import { DesktopSyncReadClient, type SyncReadEvent, type SyncInputCoordinate, type SyncRecoveryTarget, type SyncExecutedInput } from './sync-read-client';
 import type { DurableDesktopSyncReader } from './sync-desktop-registration';
 import type { DesktopSyncSessionScope } from './sync-operation-journal';
 import type { DesktopInboundJournal } from './sync-inbound-journal';
@@ -63,6 +63,11 @@ export declare class DesktopSyncLiveConnection {
     private now;
     private fence;
     private sameScope;
+    /** One finite upgrade recovery pass, not a live delivery transport. Recover
+     * saved coordinates and previously accepted lifecycle inputs whose hints
+     * never reached this host. Ordinary canonical Events have no lifecycle stamp
+     * and are left to AppSync. No socket, history scan, maintenance or timer. */
+    recoverAcceptedInputs(onCoordinate?: (coordinate: Readonly<SyncInputCoordinate>) => void): Promise<void>;
     start(): Promise<void>;
     private deadline;
     private sendControl;

package/node_modules/@quantiya/codevibe-core/dist/appsync/sync-operation-journal.d.ts

@@ -145,6 +145,11 @@ export declare class DurableDesktopSyncWriter {
         promptId: string;
         state: 'STAGED' | 'SETTLED';
     }>>;
+    /** Metadata-only inventory for preserving pre-consolidation re-raise owners.
+     * These generations identify local receipts, never a cloud API or tier. */
+    promptRetentionScopes(): Promise<Array<DesktopSyncSessionScope & {
+        promptIds: string[];
+    }>>;
     promptRetention(): PromptRetentionJournal;
     /** Canonical INACTIVE proof and joined publication owners are prerequisites.
      * Validate the complete exact-incarnation target set before deleting anything;

package/node_modules/@quantiya/codevibe-core/dist/appsync/sync-workspace-outcome.d.ts

@@ -11,13 +11,15 @@ export interface WorkspaceOutcomeReceipt {
     syncDisposition: 'ADMITTED' | 'OMITTED_QUOTA' | 'LEGACY_COMMITTED';
 }
 export interface WorkspaceOutcomeSubmissionOptions {
-    /** Persisted by the existing outbox; V2 results never downgrade on rollback. */
+    /** Retained old outbox marker; never selects a network route or accounting. */
     requiresV2?: boolean;
-    /** Must durably pin V2 before the first V2 network mutation. */
+    /** Existing outbox durability barrier, called before the canonical mutation. */
     beforeV2?: () => Promise<void>;
 }
 /** Original ciphertext and generation only; no current Session/key lookup. */
 export declare function snapshotWorkspaceOutcomeInput(value: CreateEventInput): CreateEventInput;
 export declare function parseWorkspaceOutcomeReceipt(value: unknown, expected: CreateEventInput): WorkspaceOutcomeReceipt;
-/** Used only after an affirmative cloud LEGACY route and a real Event ACK. */
+/** Local projection of the real canonical Event. It is not billing authority. */
+export declare function workspaceOutcomeEventReceipt(event: Event, expected: CreateEventInput): WorkspaceOutcomeReceipt;
+/** Retained decoder helper for the existing legacy receipt representation. */
 export declare function legacyWorkspaceOutcomeReceipt(event: Event, expected: CreateEventInput): WorkspaceOutcomeReceipt;

package/node_modules/@quantiya/codevibe-core/dist/index.d.ts

@@ -59,7 +59,7 @@ export * as CredentialBroker from './credential-broker';
 export * as SubstrateLaunch from './substrate-launch';
 export * from './types';
 export * as Planner from './planner';
-export { CompositePlannerAdapter, type CompositePlannerAdapterOptions, type AdvisoryRunner, type AdvisoryOptions, type AdvisoryResponseFormat, type LocalGemmaAdvisoryRunner, type LocalGemmaAdvisoryOptions, type LocalGemmaAdvisoryResponseFormat, HostedGemmaAdvisoryRunner, type HostedGemmaAdvisoryRunnerDeps, type HostedAdvisoryTransport, CompositeAdvisoryRunner, type CompositeAdvisoryRunnerOptions, } from './planner';
+export { type AdvisoryRunner, type AdvisoryOptions, type AdvisoryResponseFormat, type LocalGemmaAdvisoryRunner, type LocalGemmaAdvisoryOptions, type LocalGemmaAdvisoryResponseFormat, GemmaCallPipeline, GemmaPlannerAdapter, } from './planner';
 export { assertReviewerVendorCredential, reviewerProviderFor, withReviewerCredentialPreflight, ReviewerCredentialMissingError, assertImplementorVendorCredential, implementorProviderFor, withImplementorCredentialPreflight, ImplementorCredentialMissingError, type ReviewerCredentialStore, } from './substrate-launch';
 export { OllamaGemmaPlannerRunner, type OllamaRuntimeConfig } from './local-model/ollama';
 export * as Continuation from './continuation';