@quantiya/codevibe-codex-plugin 2.0.19 → 2.0.21

package/node_modules/@quantiya/codevibe-core/dist/__tests__/mobile-prompt-input.test.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@quantiya/codevibe-core/dist/appsync/__tests__/group-operation-result.test.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@quantiya/codevibe-core/dist/appsync/appsync-client.d.ts

@@ -3,8 +3,9 @@ import { CreateEventInput, CreateSessionInput, UpdateSessionInput, UpdateEventSt
 import type { PostDecisionAction } from '../orchestration-shell/types';
 import type { InvocationUsageSnapshot } from '../reviewer/token-usage';
 import type { CreateTaskGroupInput, CreateTaskGroupResult, SubmitMergeGateVerdictInput, SubmitMergeGateVerdictResult, SubmitTrackVerificationOutcomeInput, SubmitTrackVerificationOutcomeResult, ClaimGroupDecisionInput, ClaimGroupDecisionResult } from '../local-executor/task-group-types';
-import type { ReviewerVerdict, ReviewerRole, AgentKind as ReviewerAgentKind } from '../reviewer/types';
+import type { ReviewScopeContext, ReviewerVerdict, ReviewerRole, AgentKind as ReviewerAgentKind } from '../reviewer/types';
 import type { PlannerDecision } from '../planner/types';
+import { type CanonicalGateDecisionRequest, type CanonicalGroupDecisionRequest, type DecisionAttemptResult, type DecisionSubmissionResult } from '../orchestration-shell/decision-attempt';
 /**
  * Dispose a watcher/subscription WebSocket without crashing the process
  * (#657 D-1 fix-forward — the clean-quit session/admission leak).
@@ -102,6 +103,38 @@ export interface TaskGroupStatusResult {
     status: string;
     haltReason?: string;
 }
+export type GroupTerminalOperationKind = 'PROMOTE' | 'KEEP' | 'REVERT';
+export type GroupOperationState = 'PROVISIONAL' | 'AUTHORIZED' | 'PROMOTING' | 'REVERTING' | 'READY_TO_COMMIT' | 'COMMITTED' | 'OUTCOME_RECORDED' | 'CANCELLED';
+export type GroupOperationCallStatus = 'APPLIED' | 'ALREADY_APPLIED' | 'PENDING_RECOVERY' | 'CANCELLED' | 'REJECTED';
+export interface GroupOperationResult {
+    taskGroupId: string;
+    groupGeneration: number;
+    operationKind: GroupTerminalOperationKind | null;
+    callStatus: GroupOperationCallStatus;
+    authorizationState: GroupOperationState | null;
+    anchorId: string | null;
+    anchorTimestamp: string | null;
+    manifestHash: string | null;
+    memberCount: number | null;
+    operationHash: string | null;
+    operationToken: string | null;
+    decisionClaimId: string | null;
+    operationReceiptHash: string | null;
+    promotionCompletionKind: 'FRESH_APPLIED' | 'RECONCILED_APPLIED' | 'ROLLED_BACK_NO_CHANGE' | null;
+    revertCompletionKind: 'REVERTED' | 'PARTIALLY_REVERTED' | 'NO_CHANGE' | null;
+    committedAt: string | null;
+    rejectionCode: string | null;
+}
+export interface GroupDecisionCommitResult {
+    taskGroupId: string;
+    decisionClaimId: string;
+    commitStatus: 'COMMITTED' | 'ALREADY_COMMITTED' | 'PENDING_RECOVERY';
+    workflowStatus: 'COMPLETE' | 'PENDING_ERROR';
+    groupStatus: 'COMPLETE' | 'HALTED' | null;
+    committedAt: string | null;
+}
+/** @internal Exported for the closed protocol-fixture suite. */
+export declare function parseGroupOperationResult(raw: unknown, operation: string): GroupOperationResult;
 /**
  * A1e hosted blind-hold upload input. These are the ONLY client-supplied
  * plaintext fields permitted by the shared-context ZK boundary. `expiresAt`
@@ -171,6 +204,8 @@ export interface ReviewerPromptResult {
     role: ReviewerRole;
     /** Decrypted plaintext rendered prompt (UTF-8) → ReviewerSpec.prompt_template. */
     prompt: string;
+    /** Server-authored P24 scope; prior finding text is redacted because it is already in the encrypted prompt. */
+    reviewScope?: ReviewScopeContext | null;
 }
 /** One reviewer seat in a round's `reviewers[]` (decrypted). */
 export interface TaskReviewSummaryReviewer {
@@ -340,6 +375,12 @@ export interface UserDecisionAppliedEvent {
     /** The parsed `PostDecisionAction` (from the AWSJSON `payload`). */
     action: PostDecisionAction;
 }
+/** P16/P20 authoritative claim-time retirement of one prompt's actions. */
+export interface PromptActionFence {
+    sessionId: string;
+    promptId: string;
+    decisionClaimId: string | null;
+}
 /**
  * CP-1.f — decides whether a subscribed event should be delivered to the
  * caller's `onEvent` callback.
@@ -429,6 +470,7 @@ export declare class AppSyncClient {
     private deviceKeyWatcher;
     private sessionUpdateWatchers;
     private applyUserDecisionWatchers;
+    private promptActionWatchers;
     private statusWriteChains;
     private environment;
     constructor();
@@ -595,6 +637,27 @@ export declare class AppSyncClient {
      * List events for a session
      */
     listEvents(sessionId: string, source?: EventSource, limit?: number): Promise<Event[]>;
+    /**
+     * Strongly-consistent, paginated supervision history used to close the
+     * realtime subscribe-before-catch-up gap. The caller owns pagination so it
+     * can merge each page through the same strict event classifier as live data.
+     */
+    listSupervisionEvents(input: {
+        sessionId: string;
+        sessionGenerationId?: string;
+        rescanHorizonSeconds?: number;
+        nextToken?: string;
+        limit?: number;
+    }): Promise<{
+        items: Event[];
+        nextToken: string | null;
+    }>;
+    /**
+     * P16/P20 cold-open action-fence authority. The backend derives the owner
+     * from Cognito; this method exhausts the partition and returns only claimed,
+     * non-actionable Gate markers for the requested session.
+     */
+    listClaimedGatePrompts(sessionId: string): Promise<PromptActionFence[]>;
     /**
      * List the authenticated user's sessions. Paginates automatically
      * via nextToken so callers always get the complete set.
@@ -813,6 +876,85 @@ export declare class AppSyncClient {
      *          ergonomics (e.g. dispatcher routing without re-mapping the
      *          UPPER_SNAKE wire value).
      */
+    /**
+     * P16/P20 durable Gate decision admission. Unlike the legacy mutation this
+     * result is deliberately not subscribed: it fences the submitting client but
+     * never stands in for the durable GATE_RESOLUTION Event.
+     */
+    submitGateDecisionV2(request: CanonicalGateDecisionRequest, canonicalRequestHash: string): Promise<DecisionSubmissionResult>;
+    /** P16/P20 TaskGroup-native decision admission (CLAIM, not workflow COMMIT). */
+    submitGroupDecisionV2(request: CanonicalGroupDecisionRequest, canonicalRequestHash: string): Promise<DecisionSubmissionResult>;
+    authorizeGroupTerminalOperation(input: {
+        sessionId: string;
+        taskGroupId: string;
+        groupGeneration: number;
+        operationKind: GroupTerminalOperationKind;
+        decisionClaimId?: string;
+    }): Promise<GroupOperationResult>;
+    beginGroupPromotion(input: {
+        sessionId: string;
+        taskGroupId: string;
+        groupGeneration: number;
+        anchorId: string;
+        operationHash: string;
+        promotionToken: string;
+    }): Promise<GroupOperationResult>;
+    completeGroupPromotion(input: {
+        sessionId: string;
+        taskGroupId: string;
+        groupGeneration: number;
+        anchorId: string;
+        operationHash: string;
+        promotionToken: string;
+        operationReceiptHash: string;
+        completionKind: 'FRESH_APPLIED' | 'RECONCILED_APPLIED' | 'ROLLED_BACK_NO_CHANGE';
+    }): Promise<GroupOperationResult>;
+    beginGroupRevert(input: {
+        sessionId: string;
+        taskGroupId: string;
+        groupGeneration: number;
+        decisionClaimId: string;
+        anchorId: string;
+        operationHash: string;
+        revertToken: string;
+    }): Promise<GroupOperationResult>;
+    completeGroupRevert(input: {
+        sessionId: string;
+        taskGroupId: string;
+        groupGeneration: number;
+        decisionClaimId: string;
+        anchorId: string;
+        operationHash: string;
+        revertToken: string;
+        operationReceiptHash: string;
+        completionKind: 'REVERTED' | 'PARTIALLY_REVERTED' | 'NO_CHANGE';
+    }): Promise<GroupOperationResult>;
+    prepareGroupKeep(input: {
+        sessionId: string;
+        taskGroupId: string;
+        groupGeneration: number;
+        decisionClaimId: string;
+        anchorId: string;
+        operationHash: string;
+        operationReceiptHash: string;
+    }): Promise<GroupOperationResult>;
+    commitGroupDecisionV2(input: {
+        sessionId: string;
+        taskGroupId: string;
+        decisionClaimId: string;
+        operationReceiptHash: string;
+    }): Promise<GroupDecisionCommitResult>;
+    /** Owner-scoped recovery point-read for a locally durable attempt receipt. */
+    getDecisionAttempt(input: {
+        sessionId: string;
+        promptId: string;
+        decisionAttemptId: string;
+    }): Promise<DecisionAttemptResult>;
+    /** Owner-scoped durable resolution point read for receipt recovery. */
+    getGateResolution(input: {
+        sessionId: string;
+        promptId: string;
+    }): Promise<unknown>;
     applyUserDecision(input: {
         gateId: string;
         taskId: string;
@@ -924,6 +1066,8 @@ export declare class AppSyncClient {
         roundNumber: number;
         rawOutput: string;
         usage?: InvocationUsageSnapshot;
+        /** P24 explicit comprehensive-baseline reset for a revise round. */
+        reviewScopeReset?: boolean;
     }, sessionKeyBase64: string): Promise<{
         gateId: string;
         workflowState: string;
@@ -1241,6 +1385,21 @@ export declare class AppSyncClient {
     private resetSessionUpdateWatcherKeepAlive;
     private handleSessionUpdateWatcherError;
     private cleanupSessionUpdateWatcherState;
+    /**
+     * Subscribe to the owner-filtered prompt-state fan-out for one session. Only
+     * a GATE row with `mobileActionable=false` is surfaced. `onSubscribed` runs
+     * after AppSync start_ack so callers can perform the exhaustive snapshot
+     * without a subscribe-before-catch-up gap.
+     */
+    subscribeToPromptActions(sessionId: string, onActionFence: (event: PromptActionFence) => void, onSubscribed?: (isReconnect: boolean) => void | Promise<void>, onError?: (error: Error) => void): {
+        stop: () => void;
+    };
+    private createPromptActionWatcherConnection;
+    private handlePromptActionPayload;
+    private sendPromptActionWatcherStart;
+    private resetPromptActionWatcherKeepAlive;
+    private handlePromptActionWatcherError;
+    private cleanupPromptActionWatcherState;
     /**
      * PHASE-CP-10-MIN (#585) §2.3 / Codex-H3 — subscribe to the cross-device
      * `onApplyUserDecision` echo for a session. The orchestration shell uses

package/node_modules/@quantiya/codevibe-core/dist/appsync/queries.d.ts

@@ -1,6 +1,10 @@
 export declare const queries: {
     getSession: string;
     listEvents: string;
+    listSupervisionEvents: string;
+    getDecisionAttempt: string;
+    getGateResolution: string;
+    listOpenPrompts: string;
     listUserDeviceKeys: string;
     listServiceDeviceKeys: string;
     /**
@@ -40,6 +44,15 @@ export declare const mutations: {
     classifyPlannerPrompt: string;
     pingPlanner: string;
     applyUserDecision: string;
+    submitGateDecisionV2: string;
+    submitGroupDecisionV2: string;
+    authorizeGroupTerminalOperation: string;
+    beginGroupPromotion: string;
+    completeGroupPromotion: string;
+    beginGroupRevert: string;
+    completeGroupRevert: string;
+    prepareGroupKeep: string;
+    commitGroupDecisionV2: string;
     recordContinuationPacketWritten: string;
     createTaskGroup: string;
     submitMergeGateVerdict: string;
@@ -55,4 +68,5 @@ export declare const subscriptions: {
     onSessionUpdated: string;
     onClassBPacket: string;
     onApplyUserDecision: string;
+    onPromptStateChanged: string;
 };

package/node_modules/@quantiya/codevibe-core/dist/crypto/__tests__/crypto-service.test.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@quantiya/codevibe-core/dist/crypto/crypto-service.d.ts

@@ -9,6 +9,13 @@ export declare class CryptoError extends Error {
  * Current encryption version for future algorithm upgrades
  */
 export declare const ENCRYPTION_VERSION = 1;
+/**
+ * Return the fixed-width SEC1 representation of a valid P-256 private scalar.
+ * Node's ECDH getPrivateKey() may omit leading zero bytes, while JWK signing
+ * requires the full 32-byte `d` value. Left-padding preserves the scalar value
+ * and also keeps newly persisted device identities in one canonical format.
+ */
+export declare function normalizeP256PrivateScalar(scalar: Buffer): Buffer;
 /**
  * Service for end-to-end encryption operations
  */

package/node_modules/@quantiya/codevibe-core/dist/index.d.ts

@@ -21,6 +21,8 @@ export type { Config, Environment } from './config';
 export { Logger, logger, createLogger } from './logger';
 export { parseInteractivePrompt, normalizeSnapshot, } from './prompt-parser';
 export type { ParsedInteractivePrompt, PromptKind, InteractivePromptOption, } from './prompt-parser';
+export { classifyMobilePromptInput } from './mobile-prompt-input';
+export type { MobilePromptInputIntent } from './mobile-prompt-input';
 export { resumeOrCreateSession, prepareSessionEncryption, rekeySessionForNewDevices, startDeviceKeyWatcher, registerDeviceEncryptionKey, RetiredSessionCannotReactivateError, isRetiredSessionCannotReactivateError, prepareEventTimestamp, _resetPrepareEventTimestampForTesting, } from './session';
 export type { ResumeOrCreateSessionInput, ResumeOrCreateSessionResult } from './session';
 export { detectInstalledAgents, pushDetectedAgents, V1_ORCHESTRATION_PROMPT_KIND, V1_ORCHESTRATION_OPTIONS, mapOptionNumberToUserDecisionKind, mapOptionToUserDecisionKind, } from './orchestration';