@quantiya/codevibe-codex-plugin 2.0.116 → 2.0.118

package/node_modules/@quantiya/codevibe-core/dist/orchestration-shell/slash-suggest.d.ts

@@ -13,6 +13,16 @@ export declare function isSlashCommandInProgress(value: string): boolean;
  * dropdown). A bare `/` returns the whole list.
  */
 export declare function filterSlashSuggestions(value: string, commands: SlashCommandInfo[]): SlashCommandInfo[];
+/**
+ * True when Enter should RUN the input instead of completing it: the value is
+ * already exactly the highlighted slash command (`/exit` with `/exit`
+ * highlighted). A partial (`/ex`) or a highlight the user moved to another
+ * command still completes (Hendry 2026-11-12: a fully typed command must not
+ * need a second Enter).
+ */
+export declare function enterRunsTypedCommand(value: string, suggestions: ReadonlyArray<{
+    name: string;
+}>, highlight: number): boolean;
 /**
  * Builds a single dropdown row as ONE physical line (≤ `maxCols`) so it can
  * never wrap and inflate the dropdown's row count on a narrow terminal

package/node_modules/@quantiya/codevibe-core/dist/substrate-launch/agy-auth-seed.d.ts

@@ -1,4 +1,5 @@
 import { SpawnConfinementUnavailable } from '../local-executor/types';
+import { type SecretServiceResult } from './secret-service-client';
 /** The closed advisory-cell notice (closed set member 6; byte-identical in both apps). */
 export declare const AGY_SIGN_IN_NOTICE = "No answer \u2014 Antigravity isn't signed in. Run `agy` once in a terminal to sign in.";
 /** The task-halt / review-seat reason. */
@@ -16,9 +17,9 @@ export declare class AgentSignInUnavailable extends SpawnConfinementUnavailable
     readonly why: AgySignInWhy;
     constructor(why: AgySignInWhy);
 }
-export type AgySignInWhy = 'not-signed-in' | 'keychain-absent' | 'keychain-timeout' | 'keychain-error' | 'keychain-invalid';
+export type AgySignInWhy = 'not-signed-in' | 'keychain-absent' | 'keychain-timeout' | 'keychain-error' | 'keychain-invalid' | 'keychain-locked';
 export type AgySignIn = {
-    source: 'file' | 'keychain';
+    source: 'file' | 'keychain' | 'secret-service';
     data: Buffer;
 } | {
     source: 'none';
@@ -29,20 +30,29 @@ export interface AgySignInDeps {
     env?: NodeJS.ProcessEnv;
     securityBin?: string;
     timeoutMs?: number;
+    /** Linux: read one Secret Service item (default: secret-service-client.ts). */
+    secretService?: (attributes: Record<string, string>) => Promise<SecretServiceResult>;
+    /** Linux: running under WSL (default: /proc/version names Microsoft, as bwrap.ts does). */
+    isWsl?: boolean;
+    /** Linux: read /proc/version (test seam for the default WSL check). */
+    procVersion?: () => string;
 }
 /** The decoded sign-in JSON is usable when `token` holds non-empty string `access_token` and `refresh_token`. */
 export declare function validAgySignInJson(data: Buffer): boolean;
 /** go-keyring's stored form → the decoded JSON bytes, or null unless prefix, canonical base64 and JSON all check. */
 export declare function decodeKeychainValue(value: string): Buffer | null;
-/** The sign-in for an agy spawn: a valid token file, else (macOS) the Keychain item, else none. Never logs values. */
+/**
+ * The sign-in for an agy spawn: a valid token file, else the macOS Keychain item or (native Linux) the unlocked Secret
+ * Service item, else none. Never logs values.
+ */
 export declare function readAgySignIn(hostAgyDir: string, deps?: AgySignInDeps): Promise<AgySignIn>;
 /**
- * Seed `<destAgyDir>/antigravity-oauth-token` for one spawn. macOS: exclusive, no-follow, 0600, re-hashed; throws
- * AgentSignInUnavailable when there is no usable sign-in. Elsewhere: the pre-FU-A copy (`legacyCopy`). Returns the source
- * and a short digest for the log, never the value.
+ * Seed `<destAgyDir>/antigravity-oauth-token` for one spawn. macOS and native Linux: exclusive, no-follow, 0600,
+ * re-hashed; throws AgentSignInUnavailable when there is no usable sign-in. Elsewhere: the pre-FU-A copy (`legacyCopy`).
+ * Returns the source and a short digest for the log, never the value.
  */
 export declare function seedAgySignIn(hostAgyDir: string, destAgyDir: string, deps?: AgySignInDeps): Promise<{
-    source: 'file' | 'keychain' | 'legacy-copy' | 'none';
+    source: 'file' | 'keychain' | 'secret-service' | 'legacy-copy' | 'none';
     bytes: number;
     sha256: string;
 }>;

package/node_modules/@quantiya/codevibe-core/dist/substrate-launch/secret-service-client.d.ts

@@ -0,0 +1,78 @@
+import * as net from 'node:net';
+export type SecretServiceResult = {
+    kind: 'secret';
+    data: Buffer;
+} | {
+    kind: 'none';
+    why: 'not-signed-in' | 'keychain-locked';
+} | {
+    kind: 'error';
+    why: 'keychain-error' | 'keychain-timeout' | 'keychain-invalid';
+};
+export interface SecretServiceOptions {
+    env?: NodeJS.ProcessEnv;
+    uid?: number;
+    timeoutMs?: number;
+    /** Test seam: open the bus connection (default: net.createConnection on the parsed address). */
+    connect?: (socketPath: string) => net.Socket;
+    /** Test seam: is this a socket owned by `uid`? (default: lstat). */
+    isOwnSocket?: (p: string, uid: number) => boolean;
+}
+export declare const MAX_SECRET_BYTES = 65536;
+/** The session bus socket path from DBUS_SESSION_BUS_ADDRESS (first unix: entry; abstract → '\0' + name), else null. */
+export declare function sessionBusSocket(env: NodeJS.ProcessEnv, uid: number, isOwnSocket: (p: string, uid: number) => boolean): string | null;
+export declare class DBusWriter {
+    private buf;
+    len: number;
+    private ensure;
+    align(n: number): void;
+    y(v: number): void;
+    u(v: number): void;
+    s(v: string): void;
+    o(v: string): void;
+    g(v: string): void;
+    /** An array whose elements align to `elemAlign`; the length excludes the padding before the first element. */
+    a(elemAlign: number, fill: () => void): void;
+    done(): Buffer;
+}
+export type DBusValue = number | boolean | string | Buffer | DBusValue[] | {
+    sig: string;
+    value: DBusValue;
+};
+/**
+ * Split a signature into its complete types. Strict, so every accepted type consumes bytes when read: no empty struct,
+ * a dict entry only directly inside an array, with exactly two members and a basic-type key.
+ */
+export declare function splitSignature(sig: string): string[];
+export declare class DBusReader {
+    private readonly b;
+    off: number;
+    private readonly le;
+    constructor(b: Buffer, off: number, le: boolean);
+    align(n: number): void;
+    private need;
+    u32(): number;
+    str(len: number): string;
+    read(t: string): DBusValue;
+}
+export interface DBusMessage {
+    type: number;
+    serial: number;
+    replySerial?: number;
+    errorName?: string;
+    member?: string;
+    signature: string;
+    body: DBusValue[];
+}
+/** One METHOD_CALL; `body` is written by `fill` after the header (aligned to 8). */
+export declare function methodCall(serial: number, dest: string, path: string, iface: string, member: string, signature: string, fill?: (w: DBusWriter) => void): Buffer;
+/**
+ * Parse one complete message at the start of `b`; null when more bytes are needed. Throws on malformed input. The body is
+ * parsed only when `wantBody(header)` says so (default: always) — unsolicited traffic is skipped by its declared size.
+ */
+export declare function parseMessage(b: Buffer, wantBody?: (m: DBusMessage) => boolean): {
+    msg: DBusMessage;
+    size: number;
+} | null;
+/** The first unlocked item matching `attributes`, read through a plain session. Never calls Unlock or Prompt. */
+export declare function readSecretServiceItem(attributes: Record<string, string>, opts?: SecretServiceOptions): Promise<SecretServiceResult>;

package/node_modules/@quantiya/codevibe-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-core",
-  "version": "2.0.100",
+  "version": "2.0.102",
   "description": "Core library for CodeVibe plugins - shared keychain, crypto, AppSync, and auth functionality",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantiya/codevibe-codex-plugin",
-  "version": "2.0.116",
+  "version": "2.0.118",
   "description": "Control OpenAI Codex CLI from your iPhone and Android — real-time sync, approve file edits, send prompts by voice. Part of CodeVibe.",
   "main": "dist/server.js",
   "codevibe": {
@@ -47,7 +47,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@quantiya/codevibe-core": "^2.0.100",
+    "@quantiya/codevibe-core": "^2.0.102",
     "@quantiya/quorum-core": "^1.0.1",
     "chokidar": "^4.0.0",
     "dotenv": "^16.6.1",