@quantiya/codevibe-codex-plugin 2.0.113 → 2.0.115

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/structural-summary-notices.d.ts

@@ -0,0 +1,7 @@
+import type { ShellEventEmit } from './emit-shell-event';
+export declare const STRUCTURAL_SUMMARY_TRUNCATED_NOTICE = "This folder is too large to summarize in full \u2014 agents see a partial overview. Start CodeVibe in a smaller folder for a complete one.";
+export declare const STRUCTURAL_SUMMARY_SLOW_NOTICE = "The workspace overview took longer than usual to build.";
+/** §4.7 slow-path audit: the summary walk took longer than its threshold. */
+export declare function structuralSummarySlowEvent(sessionId: string, elapsedMs: number): ShellEventEmit;
+/** The summary hit its privacy budget; `reason` is the dominant cause (file count before body bytes). */
+export declare function structuralSummaryTruncatedEvent(sessionId: string, reason: string): ShellEventEmit;

package/node_modules/@quantiya/codevibe-core/dist/substrate-launch/agy-auth-seed.d.ts

@@ -0,0 +1,48 @@
+import { SpawnConfinementUnavailable } from '../local-executor/types';
+/** The closed advisory-cell notice (closed set member 6; byte-identical in both apps). */
+export declare const AGY_SIGN_IN_NOTICE = "No answer \u2014 Antigravity isn't signed in. Run `agy` once in a terminal to sign in.";
+/** The task-halt / review-seat reason. */
+export declare const AGY_SIGN_IN_REASON = "Antigravity isn't signed in. Run `agy` once in a terminal to sign in.";
+/** The advisory usage reason that maps to the cell notice (brainstorm-quorum.ts). */
+export declare const AGENT_SIGNED_OUT = "agent_signed_out";
+export declare const AGY_TOKEN_FILE = "antigravity-oauth-token";
+/**
+ * E2E seam (production build; recorded in the FU-A ledger): an item NAME in the fixed `codevibe-test-` namespace, e.g. an
+ * absent one ("not signed in"). Any other value — including empty — selects an absent test item, never the real one.
+ */
+export declare const KEYCHAIN_SERVICE_TEST_ENV = "CODEVIBE_AGY_KEYCHAIN_SERVICE_FOR_TESTS";
+/** A spawn refused because agy has no usable sign-in; a SpawnConfinementUnavailable so every caller halts visibly. */
+export declare class AgentSignInUnavailable extends SpawnConfinementUnavailable {
+    readonly why: AgySignInWhy;
+    constructor(why: AgySignInWhy);
+}
+export type AgySignInWhy = 'not-signed-in' | 'keychain-absent' | 'keychain-timeout' | 'keychain-error' | 'keychain-invalid';
+export type AgySignIn = {
+    source: 'file' | 'keychain';
+    data: Buffer;
+} | {
+    source: 'none';
+    why: AgySignInWhy;
+};
+export interface AgySignInDeps {
+    platform?: NodeJS.Platform;
+    env?: NodeJS.ProcessEnv;
+    securityBin?: string;
+    timeoutMs?: number;
+}
+/** The decoded sign-in JSON is usable when `token` holds non-empty string `access_token` and `refresh_token`. */
+export declare function validAgySignInJson(data: Buffer): boolean;
+/** go-keyring's stored form → the decoded JSON bytes, or null unless prefix, canonical base64 and JSON all check. */
+export declare function decodeKeychainValue(value: string): Buffer | null;
+/** The sign-in for an agy spawn: a valid token file, else (macOS) the Keychain item, else none. Never logs values. */
+export declare function readAgySignIn(hostAgyDir: string, deps?: AgySignInDeps): Promise<AgySignIn>;
+/**
+ * Seed `<destAgyDir>/antigravity-oauth-token` for one spawn. macOS: exclusive, no-follow, 0600, re-hashed; throws
+ * AgentSignInUnavailable when there is no usable sign-in. Elsewhere: the pre-FU-A copy (`legacyCopy`). Returns the source
+ * and a short digest for the log, never the value.
+ */
+export declare function seedAgySignIn(hostAgyDir: string, destAgyDir: string, deps?: AgySignInDeps): Promise<{
+    source: 'file' | 'keychain' | 'legacy-copy' | 'none';
+    bytes: number;
+    sha256: string;
+}>;

package/node_modules/@quantiya/codevibe-core/dist/substrate-launch/engage-substrate.d.ts

@@ -5,6 +5,7 @@ import type { ProcessRole } from "../local-executor/types";
 import type { WorkspaceRootAuthority } from "../local-executor/workspace-authority";
 import type { SubstrateHandle, SubstrateSpec } from "../substrate/types";
 import { type FallbackLadderDeps } from "./fallback-ladder";
+import { type AgySignInDeps } from "./agy-auth-seed";
 /** Map the implementor agent to the broker provider (Claude+Codex only, §6 Q4). */
 export declare function providerForAgent(agentKind: "CLAUDE" | "GEMINI" | "CODEX" | "ANTIGRAVITY"): VendorProvider | null;
 /** Inputs the LE passes to engage the moat for one implementor session. */
@@ -64,6 +65,8 @@ export interface EngageSubstrateInput {
     projectRoot?: string;
     /** Optional home dir override (injectable for tests). */
     homedir?: string;
+    /** FU-A: how an agy spawn's sign-in is read (tests inject the Keychain reader; production uses the defaults). */
+    agySignIn?: AgySignInDeps;
     /** F-P46a-4 — the implementor spawn's process-tree id (descendant reaping marker). */
     processTreeId?: string;
     /** Ladder deps (injectable for tests). */

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.97",
+  "version": "2.0.99",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-codex-plugin",
-  "version": "2.0.113",
+  "version": "2.0.115",
   "description": "Control OpenAI Codex CLI from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -47,7 +47,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "^2.0.97",
+    "@quantiya/codevibe-core": "^2.0.99",
     "@quantiya/quorum-core": "^1.0.1",
     "chokidar": "^4.0.0",
     "dotenv": "^16.6.1",