@quantiya/codevibe-codex-plugin 2.0.112 → 2.0.114

package/node_modules/@quantiya/codevibe-core/dist/local-executor/implementor-argv.d.ts

@@ -28,7 +28,9 @@ export interface ImplementorArgvPlan {
  * tool set, while `--tools ""` disables all built-in tools. Use the latter here
  * because broad advisory turns should have no file-inspection tools at all.
  */
-export declare function buildClaudeNoToolsPlanArgv(): ImplementorArgvPlan;
+export declare function buildClaudeNoToolsPlanArgv(options?: {
+    model?: string | null;
+}): ImplementorArgvPlan;
 /**
  * Helper to escape literal characters in paths so gitignore-style glob pattern matching
  * does not interpret literal `*`, `?`, `[`, `]` in directory/file names as wildcards (R4-F3).
@@ -60,20 +62,14 @@ export declare function sanitizeClaudeAllowedToolsPattern(p: string): string;
  * Enforces `--strict-mcp-config` to eliminate ambient MCP servers from enabling
  * unintended mutations or unconfined execution during advisory turns.
  */
-export declare function buildClaudeReadOnlyAdvisoryPlanArgv(workdir?: string, attachments?: readonly string[]): ImplementorArgvPlan;
+export declare function buildClaudeReadOnlyAdvisoryPlanArgv(workdir?: string, attachments?: readonly string[], options?: {
+    model?: string | null;
+}): ImplementorArgvPlan;
 /**
- * D9 — the ONE shared `CODEVIBE_AGY_MODEL` resolver used by BOTH
- * `buildImplementorArgv` (the spawned argv) and `agyImplementorAllowlistEntries`
- * (the authority templates) so the two can never drift. Absent/empty → `null`
- * (omit `--model`, agy default). Invalid → THROW fail-closed with a clear
- * operator error (surfaces at scope construction / spawn, never a silent
- * mangled spawn).
- *
- * LIFETIME: the env is resolved ONCE into the authority scope at
- * `LocalExecutor` construction (`makeImplementorCommandScope`) — mutating
- * `CODEVIBE_AGY_MODEL` mid-session drifts the spawn argv from the cached
- * template → a false-positive AuthorityError. Fixed-per-executor-lifecycle;
- * tests that mutate the env MUST rebuild the scope/executor.
+ * D9 — the shared `CODEVIBE_AGY_MODEL` resolver used by `buildImplementorArgv`
+ * (when no explicit model option is supplied) and `agyImplementorAllowlistEntries`
+ * (to pin env-configured model overrides at scope construction). Absent/empty →
+ * `null` (omit `--model`, agy machine default). Invalid → THROW fail-closed.
  */
 export declare function resolveAgyModel(env?: NodeJS.ProcessEnv): string | null;
 /**
@@ -150,6 +146,7 @@ export declare function stripAgyWebPlugin(workdir: string): void;
  */
 export declare function buildImplementorArgv(agent: AgentKind, mode: ImplementorMode, workdir?: string, options?: {
     mcpConfigPath?: string;
+    model?: string | null;
 }): ImplementorArgvPlan;
 /**
  * A1b (Codex summary never-read fix, READ side) — read a Codex implementor's

package/node_modules/@quantiya/codevibe-core/dist/local-executor/index.d.ts

@@ -2,7 +2,7 @@ export { AuthorityError, AuthorityRefusal, AuthorityRefusalCategory, AuthoritySc
 export { spawnHealthProbe, spawnImplementor, spawnReviewer } from './spawn';
 export { reapMarkedProcessTree, PROCESS_TREE_MARKER_ENV, type ReapResult, type ReapOptions, } from './descendant-reaper';
 export { AgentKind, AuthorityAction, ClassBInbound, ExecutorError, FailureClass, FileChangeKind, GateDispatchPayload, GateDispatchReviewerSeat, HookEvent, ImplementorHandle, LocalExecutor, MergeGateDispatchPayload, ProbeHandle, ProcessExitedInfo, ProcessRole, ProcessSpawnedInfo, ReviewerHandle, ReviewerDispatchPayload, ReviseFeedbackPayload, ReviseSeatFinding, SignedEnvelope, SpawnArgs, SpawnArgsInvalid, SpawnHandleBase, TaskGroupHaltedPayload, TrackAssignedPayload, TrackConflictContext, } from './types';
-export { agyImplementorAllowlistEntries, agyWorkdirBriefPreamble, AGY_IMPLEMENTOR_PRINT_TIMEOUT, buildClaudeNoToolsPlanArgv, buildClaudeReadOnlyAdvisoryPlanArgv, escapeClaudePathGlob, formatClaudePermissionPath, sanitizeClaudeAllowedToolsPattern, buildImplementorArgv, extractMcpServerConfig, setupAgyWebPlugin, stripAgyWebPlugin, stripClaudeWebArgs, stripCodexWebArgs, IMPLEMENTOR_COMMAND_ALLOWLIST, makeImplementorCommandScope, resolveAgyModel, type ImplementorArgvPlan, type ImplementorCaptureSurface, type ImplementorMode, } from './implementor-argv';
+export { agyImplementorAllowlistEntries, agyWorkdirBriefPreamble, AGY_IMPLEMENTOR_PRINT_TIMEOUT, bindAgyPrintPrompt, buildClaudeNoToolsPlanArgv, buildClaudeReadOnlyAdvisoryPlanArgv, escapeClaudePathGlob, formatClaudePermissionPath, sanitizeClaudeAllowedToolsPattern, buildImplementorArgv, extractMcpServerConfig, setupAgyWebPlugin, stripAgyWebPlugin, stripClaudeWebArgs, stripCodexWebArgs, IMPLEMENTOR_COMMAND_ALLOWLIST, makeImplementorCommandScope, resolveAgyModel, type ImplementorArgvPlan, type ImplementorCaptureSurface, type ImplementorMode, } from './implementor-argv';
 export { verifyClassBEd25519, classBCanonicalForSigning, ed25519PublicKeyFromRaw, type ClassBCryptoVerifyResult, } from './class-b-verify';
 export { TrackRegistry, TrackProcess, trackKey } from './track-registry';
 export { EmitShellEventFn, HookBridge, HookBridgeDeps, } from './hook-bridge';

package/node_modules/@quantiya/codevibe-core/dist/orchestration/agent-model-catalog.d.ts

@@ -0,0 +1,11 @@
+import { type AgentModelCatalog, type ConfigurableAgentKind } from './agent-model-settings';
+export * from './agent-model-settings';
+export interface DiscoverModelCatalogOptions {
+    env?: NodeJS.ProcessEnv;
+    homeDir?: string;
+    timeoutMs?: number;
+    forceRefresh?: boolean;
+}
+export declare function discoverAgentModelCatalog(agent: ConfigurableAgentKind, opts?: DiscoverModelCatalogOptions): Promise<AgentModelCatalog>;
+export declare function discoverAllAgentModelCatalogs(installedAgents: readonly string[], opts?: DiscoverModelCatalogOptions): Promise<Partial<Record<ConfigurableAgentKind, AgentModelCatalog>>>;
+export declare function clearAgentModelCatalogCacheForTest(): void;

package/node_modules/@quantiya/codevibe-core/dist/orchestration/agent-model-settings.d.ts

@@ -0,0 +1,56 @@
+export type ConfigurableAgentKind = 'CLAUDE' | 'CODEX' | 'ANTIGRAVITY';
+/**
+ * Strict model identifier grammar across Claude, Codex, and Antigravity CLIs:
+ * - Starts with an ASCII alphanumeric character (blocks flag injection like `--yolo`)
+ * - Permits ASCII alphanumerics plus `_`, `.`, `:`, `/`, `[`, `]`, `-` (supports slugs
+ *   like `gemini-4-carbon-medium`, `gpt-6.1-sol`, and Claude `[1m]` context variants)
+ * - Forbids whitespace, quotes, shell metacharacters, commas, parentheses, and control bytes
+ * - Maximum length 128 characters
+ */
+export declare const MODEL_ID_PATTERN: RegExp;
+/**
+ * Antigravity's `~/.gemini/antigravity-cli/settings.json` persists human-readable
+ * model labels (e.g. `"Gemini 4 Carbon (Medium)"`) in addition to CLI slugs.
+ * Keep CLI `--model` strictly governed by `MODEL_ID_PATTERN`, while allowing safe
+ * printable vendor labels when seeding confined Antigravity `settings.json`.
+ */
+export declare const AGY_CONFIG_MODEL_PATTERN: RegExp;
+export declare function isValidModelIdentifier(value: unknown): value is string;
+export declare function isValidAgyConfigModelValue(value: unknown): value is string;
+export declare function assertValidModelIdentifier(value: string, sourceLabel?: string): string;
+export interface SafeClaudeModelSettings {
+    model?: string;
+    effortLevel?: string;
+    alwaysThinkingEnabled?: boolean;
+    modelSettings?: Record<string, {
+        effortLevel: string;
+    }>;
+}
+export interface SafeCodexModelConfig {
+    model?: string;
+    modelReasoningEffort?: string;
+}
+export interface SafeAgyModelSettings {
+    model?: string;
+    effort?: string;
+}
+export declare function readSafeClaudeModelSettings(homeDir?: string, env?: NodeJS.ProcessEnv): SafeClaudeModelSettings;
+export declare function buildClaudeIsolatedAdvisorySettingsJson(inlinePermissionsSettingsJson: string, homeDir?: string, env?: NodeJS.ProcessEnv): string;
+export declare function readSafeCodexModelConfig(homeDir?: string, env?: NodeJS.ProcessEnv): SafeCodexModelConfig;
+export declare function readSafeAgyModelSettings(homeDir?: string, env?: NodeJS.ProcessEnv): SafeAgyModelSettings;
+export declare function detectConfiguredMachineDefaultModel(agent: ConfigurableAgentKind, homeDir?: string, env?: NodeJS.ProcessEnv): string | null;
+export interface AgentModelOption {
+    id: string;
+    label: string;
+    description?: string;
+    isDefault?: boolean;
+}
+export interface AgentModelCatalog {
+    agent: ConfigurableAgentKind;
+    configuredDefault: string | null;
+    cliDefaultModel: string | null;
+    options: AgentModelOption[];
+    source: 'cli' | 'cache' | 'fallback';
+}
+export declare function formatMachineDefaultSummary(catalog?: AgentModelCatalog | null): string;
+export declare function parseAgyModelsOutput(stdout: string): AgentModelOption[];

package/node_modules/@quantiya/codevibe-core/dist/orchestration/detect-agents.d.ts

@@ -1,5 +1,6 @@
 import { Logger } from '../logger';
 import { AppSyncClient } from '../appsync';
+import type { UserReviewerPolicySnapshot } from '../types/reviewer';
 import { CapabilityRegistry } from '../adapter/capabilities';
 export type DetectableAgent = 'CLAUDE' | 'GEMINI' | 'CODEX' | 'ANTIGRAVITY';
 declare function launcherCompatiblePath(env: NodeJS.ProcessEnv, commonPaths?: string[]): string;
@@ -66,5 +67,5 @@ export declare const __testing: {
  *                with exactly the detected set and write even when empty.
  *                Default false (1.x companion union path).
  */
-export declare function pushDetectedAgents(client: AppSyncClient, log: Pick<Logger, 'info' | 'warn'>, capabilityRegistry?: CapabilityRegistry, detectFn?: () => DetectableAgent[], replace?: boolean): Promise<void>;
+export declare function pushDetectedAgents(client: AppSyncClient, log: Pick<Logger, 'info' | 'warn'>, capabilityRegistry?: CapabilityRegistry, detectFn?: () => DetectableAgent[], replace?: boolean): Promise<UserReviewerPolicySnapshot | void>;
 export {};

package/node_modules/@quantiya/codevibe-core/dist/orchestration/index.d.ts

@@ -1,2 +1,3 @@
 export { detectInstalledAgents, detectInstalledAgentModels, detectAgentModel, DEFAULT_AGENT_MODELS, pushDetectedAgents, type DetectableAgent, } from './detect-agents';
 export { V1_ORCHESTRATION_PROMPT_KIND, V1_ORCHESTRATION_OPTIONS, mapOptionNumberToUserDecisionKind, mapOptionToUserDecisionKind, type V1OrchestrationOption, type V1UserDecisionKind, } from './v1-options';
+export * from './agent-model-catalog';

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/advisory-fingerprint/git-runner.d.ts

@@ -6,10 +6,10 @@ export declare class ProcessRunError extends Error {
     readonly signal: NodeJS.Signals | null;
     readonly killed: boolean;
     readonly stderr: string;
-    /** the deadline ended the run (or no time was left to start it) */
+    /** the deadline ended the run, no time was left to start it, or the runner was aborted */
     readonly timedOut: boolean;
     constructor(message: string, code: number | string | null, signal: NodeJS.Signals | null, killed: boolean, stderr: string, 
-    /** the deadline ended the run (or no time was left to start it) */
+    /** the deadline ended the run, no time was left to start it, or the runner was aborted */
     timedOut: boolean);
 }
 export interface ProcessRunner {
@@ -18,6 +18,11 @@ export interface ProcessRunner {
         cwd: string;
         env: NodeJS.ProcessEnv;
     }): Promise<string>;
+    /**
+     * End all remaining work: SIGKILL the group of every spawned child that has not closed, release queued runs, and fail
+     * every later run. Idempotent. Returns the ids of the process groups it ended (empty when nothing was live).
+     */
+    abort(): readonly number[];
     /** Process-group ids this runner spawned (diagnostics and tests). */
     readonly spawnedGroups: readonly number[];
 }

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/advisory-fingerprint/panel-baseline.d.ts

@@ -0,0 +1,18 @@
+import type { AdvisoryWorkspaceFingerprintProbe } from './walk';
+/** Longest a cell waits for its siblings before the shared probe starts anyway. */
+export declare const PANEL_BASELINE_COALESCE_MS = 100;
+export interface PanelBaselineTake {
+    probe: AdvisoryWorkspaceFingerprintProbe;
+    /** `shared`: the panel's probe; `own`: this cell asked after it started and ran its own */
+    baseline: 'shared' | 'own';
+    /** time from this cell's request to the start of its probe (the coalescing wait; 0 for `own`) */
+    waitedMs: number;
+}
+export interface PanelBaseline {
+    take(): Promise<PanelBaselineTake>;
+}
+export declare function createPanelBaseline(opts: {
+    expectedCells: number;
+    probe: () => Promise<AdvisoryWorkspaceFingerprintProbe>;
+    coalesceMs?: number;
+}): PanelBaseline;