@quantiya/codevibe-codex-plugin 2.0.11 → 2.0.14

package/node_modules/@quantiya/codevibe-core/dist/tool-activity/ledger.d.ts

@@ -12,13 +12,13 @@ export declare const LedgerEntrySchema: z.ZodObject<{
      * rewind falls back to session start, which is still SAFE.
      */
     byteOffset: z.ZodNumber;
-    state: z.ZodEnum<["durably-outboxed", "acked"]>;
+    state: z.ZodEnum<["durably-outboxed", "acked", "terminal"]>;
 }, "strip", z.ZodTypeAny, {
-    state: "durably-outboxed" | "acked";
+    state: "terminal" | "durably-outboxed" | "acked";
     byteOffset: number;
     clientEventId: string;
 }, {
-    state: "durably-outboxed" | "acked";
+    state: "terminal" | "durably-outboxed" | "acked";
     byteOffset: number;
     clientEventId: string;
 }>;
@@ -36,30 +36,37 @@ export declare const LedgerFileSchema: z.ZodObject<{
          * rewind falls back to session start, which is still SAFE.
          */
         byteOffset: z.ZodNumber;
-        state: z.ZodEnum<["durably-outboxed", "acked"]>;
+        state: z.ZodEnum<["durably-outboxed", "acked", "terminal"]>;
     }, "strip", z.ZodTypeAny, {
-        state: "durably-outboxed" | "acked";
+        state: "terminal" | "durably-outboxed" | "acked";
         byteOffset: number;
         clientEventId: string;
     }, {
-        state: "durably-outboxed" | "acked";
+        state: "terminal" | "durably-outboxed" | "acked";
         byteOffset: number;
         clientEventId: string;
     }>>;
+    /**
+     * Permanently rejected outbox windows. Optional for backwards compatibility
+     * with version-1 ledgers written before per-window terminal authority existed.
+     */
+    terminalClientEventIds: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
     entries: Record<string, {
-        state: "durably-outboxed" | "acked";
+        state: "terminal" | "durably-outboxed" | "acked";
         byteOffset: number;
         clientEventId: string;
     }>;
     version: 1;
+    terminalClientEventIds: string[];
 }, {
     entries: Record<string, {
-        state: "durably-outboxed" | "acked";
+        state: "terminal" | "durably-outboxed" | "acked";
         byteOffset: number;
         clientEventId: string;
     }>;
     version: 1;
+    terminalClientEventIds?: string[] | undefined;
 }>;
 export type LedgerFile = z.infer<typeof LedgerFileSchema>;
 /**
@@ -111,7 +118,9 @@ export declare class ToolActivityLedger {
     private readonly logger;
     private readonly rootDir;
     private entries;
+    private terminalWindows;
     private loaded;
+    private mutationChain;
     constructor(opts: ToolActivityLedgerOptions);
     private filePath;
     private legacyOwnedFilePath;
@@ -133,7 +142,7 @@ export declare class ToolActivityLedger {
      * rebuildability) — used after a ledger loss so a still-pending window is not
      * re-observed as new. The outbox does not carry per-occurrence byteOffsets, so
      * they default to 0 (rewind falls back to the safe session-start bound).
-     * Never DOWNGRADES an existing `acked` entry.
+     * Never DOWNGRADES an existing `acked` or `terminal` entry.
      */
     rebuildFromOutbox(outboxEntries: ToolActivityOutboxEnvelope[]): void;
     /**
@@ -168,7 +177,9 @@ export declare class ToolActivityLedger {
      * (`entries`/`owned`) deferral is permanent, so the cursor advances freely.
      */
     isLegacyInFlight(id: string): boolean;
-    getState(id: string): 'durably-outboxed' | 'acked' | undefined;
+    getState(id: string): 'durably-outboxed' | 'acked' | 'terminal' | undefined;
+    /** True when a window has been durably settled as permanently undeliverable. */
+    isTerminalWindow(clientEventId: string): boolean;
     /**
      * Unique `clientEventId`s still in the `durably-outboxed` state (sealed, not yet
      * acked). The §4.5 N4 startup cross-check compares these against the surviving
@@ -192,6 +203,11 @@ export declare class ToolActivityLedger {
     markDurablyOutboxed(occurrences: OccurrenceRef[], clientEventId: string): Promise<void>;
     /** Mark every id of an acked window `acked` (retained for the pruning horizon). */
     markAcked(clientEventId: string): Promise<void>;
+    /**
+     * Mark every id of a permanently rejected window `terminal`. This must be
+     * persisted before its outbox file is pruned so restart cannot resend it.
+     */
+    markTerminal(clientEventId: string, invocationIds?: string[]): Promise<void>;
     /**
      * Crash-ordered repair step (2) (§4.5 V3/W2): DEMOTE/remove every mapping
      * referencing a quarantined or missing `clientEventId` so its occurrences are
@@ -265,10 +281,14 @@ export declare class ToolActivityLedger {
     /** Test/diagnostic: a snapshot of the in-memory legacy IN-FLIGHT id set. */
     legacyInFlightSnapshot(): string[];
     /**
-     * Bound ledger growth: drop `acked` entries whose source position is strictly
-     * BELOW a safe horizon (§4.5 — max(replay cursor, Stop turn-start)). Never
-     * prunes `durably-outboxed` (still pending an ack). Persists if anything changed.
+     * Bound ledger growth: drop settled (`acked` or `terminal`) entries whose
+     * source position is strictly BELOW a safe horizon (§4.5 — max(replay cursor,
+     * Stop turn-start)). Never prunes `durably-outboxed` or a terminal tombstone
+     * whose outbox file still exists: the latter may be an interrupted prune and
+     * must remain terminal across restart. Persists if anything changed.
      */
     prune(beforeByteOffset: number): Promise<void>;
+    private mutateAndPersist;
+    private outboxEntryExists;
     private persist;
 }

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.9",
+  "version": "2.0.10",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/node_modules/fs-ext/build/Makefile

@@ -331,8 +331,8 @@ ifeq ($(strip $(foreach prefix,$(NO_LOAD),\
 endif
 
 quiet_cmd_regen_makefile = ACTION Regenerating $@
-cmd_regen_makefile = cd $(srcdir); /opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/gyp/gyp_main.py -fmake --ignore-environment "-Dlibrary=shared_library" "-Dvisibility=default" "-Dnode_root_dir=/Users/hendryyeh/Library/Caches/node-gyp/24.4.0" "-Dnode_gyp_dir=/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp" "-Dnode_lib_file=/Users/hendryyeh/Library/Caches/node-gyp/24.4.0/<(target_arch)/node.lib" "-Dmodule_root_dir=/Users/hendryyeh/Workspace/CodeVibe/codevibe-codex-plugin/node_modules/fs-ext" "-Dnode_engine=v8" "--depth=." "-Goutput_dir=." "--generator-output=build" -I/Users/hendryyeh/Workspace/CodeVibe/codevibe-codex-plugin/node_modules/fs-ext/build/config.gypi -I/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi -I/Users/hendryyeh/Library/Caches/node-gyp/24.4.0/include/node/common.gypi "--toplevel-dir=." binding.gyp
-Makefile: $(srcdir)/binding.gyp $(srcdir)/../../../../../Library/Caches/node-gyp/24.4.0/include/node/common.gypi $(srcdir)/build/config.gypi $(srcdir)/../../../../../../../opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi
+cmd_regen_makefile = cd $(srcdir); /opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/gyp/gyp_main.py -fmake --ignore-environment "-Dlibrary=shared_library" "-Dvisibility=default" "-Dnode_root_dir=/Users/hendryyeh/Library/Caches/node-gyp/24.4.0" "-Dnode_gyp_dir=/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp" "-Dnode_lib_file=/Users/hendryyeh/Library/Caches/node-gyp/24.4.0/<(target_arch)/node.lib" "-Dmodule_root_dir=/Users/hendryyeh/Workspace/CodeVibe/.agent-worktrees/codex-1/p17-retry-containment/codevibe-codex-plugin/node_modules/fs-ext" "-Dnode_engine=v8" "--depth=." "-Goutput_dir=." "--generator-output=build" -I/Users/hendryyeh/Workspace/CodeVibe/.agent-worktrees/codex-1/p17-retry-containment/codevibe-codex-plugin/node_modules/fs-ext/build/config.gypi -I/opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi -I/Users/hendryyeh/Library/Caches/node-gyp/24.4.0/include/node/common.gypi "--toplevel-dir=." binding.gyp
+Makefile: $(srcdir)/../../../../../../../../Library/Caches/node-gyp/24.4.0/include/node/common.gypi $(srcdir)/build/config.gypi $(srcdir)/../../../../../../../../../../opt/homebrew/lib/node_modules/npm/node_modules/node-gyp/addon.gypi $(srcdir)/binding.gyp
 	$(call do_cmd,regen_makefile)
 
 # "all" is a concatenation of the "all" targets from all the included

package/node_modules/fs-ext/build/config.gypi

@@ -490,7 +490,7 @@
     "python": "/opt/homebrew/opt/python@3.14/bin/python3.14",
     "standalone_static_library": 1,
     "global_prefix": "/opt/homebrew",
-    "local_prefix": "/Users/hendryyeh/Workspace/CodeVibe/codevibe-codex-plugin",
+    "local_prefix": "/Users/hendryyeh/Workspace/CodeVibe/.agent-worktrees/codex-1/p17-retry-containment/codevibe-codex-plugin",
     "globalconfig": "/opt/homebrew/etc/npmrc",
     "init_module": "/Users/hendryyeh/.npm-init.js",
     "userconfig": "/Users/hendryyeh/.npmrc",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-codex-plugin",
-  "version": "2.0.11",
+  "version": "2.0.14",
   "description": "Control OpenAI Codex CLI from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -47,12 +47,13 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "2.0.9",
+    "@quantiya/codevibe-core": "2.0.10",
     "@quantiya/quorum-core": "^1.0.1",
     "chokidar": "^4.0.0",
     "dotenv": "^16.6.1",
     "express": "^5.1.0",
     "graphql": "^16.12.0",
+    "shell-quote": "1.9.0",
     "uuid": "^13.0.0",
     "ws": "^8.18.3"
   },
@@ -63,6 +64,7 @@
     "dotenv",
     "express",
     "graphql",
+    "shell-quote",
     "uuid",
     "ws"
   ],
@@ -85,6 +87,7 @@
     "dotenv",
     "express",
     "graphql",
+    "shell-quote",
     "uuid",
     "ws"
   ]