@quantiya/codevibe-claude-plugin 2.0.76 → 2.0.77

package/node_modules/@quantiya/codevibe-core/dist/session-resume/successor-carry-over.d.ts

@@ -0,0 +1,54 @@
+/**
+ * P61 INV-5 (design §8.5) for an interrupted resume found at a resume entry
+ * point (§6.2 step 2): S's shell starts, and S's create is replayed, only on a
+ * verified local carry-over that ends in its marker for P.
+ *
+ * S's log is first classified with the read-only reader (B-8), so nothing in
+ * S's directory changes on the way to a refusal. When the log cannot show the
+ * marker, the three INV-5 cases apply:
+ * - keychain unavailable: fail closed with the §8.1 keychain copy;
+ * - P still inside its window: S's log is set aside (exact-path rename to the
+ *   shipped `log.jsonl.unrecoverable-<ms>` shape, never deleted) and the
+ *   carry-over is rebuilt from P as a fresh log, re-verified and re-sealed;
+ * - otherwise: fail closed with the applicable §8.1 copy.
+ * The rebuild runs under P's resume lock, as S's recorded owner (INV-1).
+ */
+import type { ContextItem, ReadOnlyContextLogResult } from '../orchestration-shell/context-items';
+import { type ResumeChosenDeps } from './resume-chosen';
+import { type ResumeLedgerRecord } from './resume-ledger';
+/** Why S's log does not show a verified carry-over ending in its marker. */
+export type SuccessorLogFailure = 'absent' | 'integrity' | 'unreadable' | 'no-marker';
+export type SuccessorLogState = {
+    kind: 'verified';
+    items: ContextItem[];
+    marker: ContextItem;
+} | {
+    kind: 'keychain-unavailable';
+} | {
+    kind: 'unverifiable';
+    reason: SuccessorLogFailure;
+};
+/** Classify a read-only read of S's log against the ledger's sealed marker. */
+export declare function classifySuccessorLog(read: ReadOnlyContextLogResult, marker: ResumeLedgerRecord['marker']): SuccessorLogState;
+export type SuccessorRebuildResult = {
+    kind: 'rebuilt';
+    record: ResumeLedgerRecord;
+    items: ContextItem[];
+    marker: ContextItem;
+    warnings: string[];
+} | {
+    kind: 'refused';
+    text: string;
+} | {
+    kind: 'cancelled';
+};
+/** INV-5's second and third cases. The caller holds P's lock and has taken over S's owner record. */
+export declare function rebuildSuccessorCarryOver(args: {
+    record: ResumeLedgerRecord;
+    reason: SuccessorLogFailure;
+    /** The targeted resume in a terminal; any other replay never prompts. */
+    interactive: boolean;
+    chosen: ResumeChosenDeps;
+    /** Rename S's log aside by exact path, if it exists. */
+    setAsideSuccessorLog(successorSessionId: string): Promise<void>;
+}): Promise<SuccessorRebuildResult>;

package/node_modules/@quantiya/codevibe-core/dist/session-resume/will-retire.d.ts

@@ -0,0 +1,24 @@
+/**
+ * P61 `willRetire` (SESSION-RESUME-DESIGN.md §6.2 step 3): the shared
+ * definition of a row this launch retires. The `--continue` comparison and the
+ * pre-listing retire both evaluate it on the same step-1 `listSessions` read,
+ * so they can never disagree (C2-F5).
+ */
+import { type SessionFreshnessFields } from '../appsync/session-freshness';
+import type { OwnerRecordState } from './local-records';
+/** The plain-launch orphan threshold the pre-listing sweep shares (`cli.ts` sweep). */
+export declare const PRE_LISTING_STALE_THRESHOLD_MS: number;
+export interface RetireCandidateRow extends SessionFreshnessFields {
+    sessionId: string;
+    agentType: string;
+    status: string;
+}
+export interface WillRetireContext {
+    nowMs: number;
+    /** The session running in this process, never retired. */
+    ownSessionId?: string;
+    /** This computer's owner-record state for the row's session. */
+    ownerState: OwnerRecordState;
+    staleThresholdMs?: number;
+}
+export declare function willRetire(row: RetireCandidateRow, ctx: WillRetireContext): boolean;

package/node_modules/@quantiya/codevibe-core/dist/types/session.d.ts

@@ -69,6 +69,8 @@ export interface Session {
      * which case the client stamps SESSION_KEY_GEN_ABSENT_SENTINEL.
      */
     sessionKeyGen?: string;
+    /** P61 — the predecessor this session resumed; selected only by the resume create. */
+    resumedFromSessionId?: string | null;
 }
 /**
  * GraphQL input for creating sessions
@@ -91,6 +93,19 @@ export interface CreateSessionInput {
      * User.orchestrationEnabledDefault (option 6a auto-populate).
      */
     orchestrationEnabled?: boolean;
+    /**
+     * P61 session resume: the ended CODEVIBE session this create continues.
+     * Idempotent (creationRequestId) CODEVIBE creates only; the backend claims
+     * the predecessor atomically with admission. Absent on every plain create.
+     */
+    resumedFromSessionId?: string;
+}
+/** P61 clean-exit tail of the context log (design §9.4). */
+export interface ContextTailInput {
+    /** The tail item's seq (canonical Crockford ULID). */
+    seq: string;
+    /** Lowercase SHA-256 hex of the tail item's plaintext JSON. */
+    itemSha256: string;
 }
 /**
  * GraphQL input for updating sessions
@@ -105,4 +120,56 @@ export interface UpdateSessionInput {
      * were retired by A6; current clients do not set this from the CLI.
      */
     orchestrationEnabled?: boolean;
+    /**
+     * P61 clean-exit fields (design §9.4). The backend stores them only on the
+     * owner's live→INACTIVE transition of a CODEVIBE session, write-once.
+     */
+    contextTail?: ContextTailInput;
+    contextTailIsResumeMarker?: boolean;
+    encryptedLastPrompt?: string;
+}
+/** P61 refusal reasons on ResumeDetails (design §9.2). */
+export type ResumeRefusalReason = 'NOT_ORCHESTRATION' | 'STILL_ACTIVE' | 'ALREADY_RESUMED' | 'WINDOW_CLOSED';
+/** P61 owner-only resume read contract (design §9.2). */
+export interface ResumeDetails {
+    sessionId: string;
+    agentType: AgentType;
+    status: SessionStatus;
+    createdAt: string;
+    lastHeartbeatAt: string | null;
+    /** Epoch seconds; null while live. */
+    expiresAt: number | null;
+    /** Epoch seconds; null until the live→INACTIVE transition. */
+    resumableUntil: number | null;
+    resumedFromSessionId: string | null;
+    resumedAs: {
+        successorSessionId: string;
+        claimedAt: string;
+    } | null;
+    resumable: boolean;
+    notResumableReason: ResumeRefusalReason | null;
+    /** Ciphertext, as on Session. */
+    projectPath: string;
+    encryptedLastPrompt: string | null;
+    encryptedKeys: EncryptedSessionKey[] | null;
+    sessionKeyGen: string | null;
+    creatorDeviceId: string | null;
+    contextTailSeq: string | null;
+    contextTailSha256: string | null;
+    contextTailIsResumeMarker: boolean | null;
+}
+export interface ResumableSessionPage {
+    items: ResumeDetails[];
+    nextToken: string | null;
+}
+/** A hosted ContextItem row: routing ids and ciphertext only (design §9.3). */
+export interface ContextItemRowWire {
+    seq: string;
+    taskId: string | null;
+    trackId: string | null;
+    ciphertext: string;
+}
+export interface ContextItemPage {
+    items: ContextItemRowWire[];
+    nextToken: string | null;
 }

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.71",
+  "version": "2.0.72",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-claude-plugin",
-  "version": "2.0.76",
+  "version": "2.0.77",
   "description": "Control Claude Code from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -48,7 +48,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "^2.0.71",
+    "@quantiya/codevibe-core": "^2.0.72",
     "@quantiya/quorum-core": "^1.0.1",
     "dotenv": "^16.6.1",
     "express": "^5.1.0",