@quantiya/codevibe-codex-plugin 2.0.55 → 2.0.57

package/hooks/common.sh

@@ -489,7 +489,15 @@ ensure_codex_daemon() {
   fi
   if [ $rc -ne 0 ]; then
     if ! ps -p "$server_pid" > /dev/null 2>&1; then
-      log "ERROR" "ensure_codex_daemon: daemon died on startup (likely auth failure)"
+      # The daemon is our child: its exit code tells a credential-store failure
+      # (78, not fixed by signing in) from the usual not-signed-in death.
+      local death_rc=0
+      wait "$server_pid" 2>/dev/null || death_rc=$?
+      if [ "$death_rc" = "78" ]; then
+        log "ERROR" "ensure_codex_daemon: daemon could not read its stored credentials (exit 78) — not a sign-in problem; cause and fix are in ${CODEVIBE_TMPDIR}/codevibe-codex-mcp.log"
+      else
+        log "ERROR" "ensure_codex_daemon: daemon died on startup (exit $death_rc; usually not signed in — run 'codevibe login')"
+      fi
     else
       # (#638 F3) Cold-start cap elapsed and the port never appeared, but the launched
       # PID is STILL ALIVE. Leaving it alive-and-unmapped is the #638 duplicate bug: the

package/libexec/companion-launcher

@@ -613,13 +613,24 @@ sleep 1
 
 # Check if server is still running (exits if auth failed)
 if ! kill -0 "$SERVER_PID" 2>/dev/null; then
-    log "ERROR: Server failed to start"
-    # Show the last few lines of the log for context (e.g., auth error)
+    # Our child: its exit code says why (78 = stored credentials unreadable, which
+    # signing in again does not fix). set -e: collect it without aborting.
+    SERVER_RC=0
+    wait "$SERVER_PID" 2>/dev/null || SERVER_RC=$?
+    log "ERROR: Server failed to start (exit $SERVER_RC)"
     echo ""
-    tail -3 "$MCP_LOG_FILE" 2>/dev/null | grep -v '^\[' | head -1
-    echo ""
-    echo "Server failed to start. Check $MCP_LOG_FILE for details."
-    cv_failed "server_died_on_startup"
+    if [ "$SERVER_RC" = "78" ]; then
+        awk '/CodeVibe could not read its stored credentials/ { block = ""; on = 1 } on && !/^\[/ { block = block $0 "\n" } END { printf "%s", block }' "$MCP_LOG_FILE" 2>/dev/null
+        echo ""
+        echo "Server failed to start. Full log: $MCP_LOG_FILE"
+        cv_failed "credential_storage_unavailable"
+    else
+        # Show the last few lines of the log for context (e.g., auth error)
+        tail -3 "$MCP_LOG_FILE" 2>/dev/null | grep -v '^\[' | head -1
+        echo ""
+        echo "Server failed to start. Check $MCP_LOG_FILE for details."
+        cv_failed "server_died_on_startup"
+    fi
     sleep 1
     exit 1
 fi

package/node_modules/@quantiya/codevibe-core/dist/appsync/appsync-client.d.ts

@@ -489,6 +489,22 @@ export declare function shouldDeliverSubscribedEvent(event: Pick<Event, 'source'
  * failure from a genuine sign-in rejection.
  */
 export type AuthFailureKind = 'no_tokens' | 'refresh_auth_rejected' | 'refresh_network' | 'credential_storage_unavailable';
+/**
+ * Exit code a companion daemon uses when it cannot read its stored credentials.
+ * The plugins' hooks and launchers key their user-facing message off it, so a
+ * credential-store failure is never reported as "run codevibe login".
+ */
+export declare const CREDENTIAL_STORAGE_UNAVAILABLE_EXIT_CODE = 78;
+export interface StoredAuthFailureReport {
+    exitCode: number;
+    message: string;
+}
+/**
+ * What a companion daemon prints, and exits with, when
+ * `authenticateWithStoredTokens()` fails. Signing in again repairs only a missing
+ * or rejected sign-in; for the other kinds it says what actually went wrong.
+ */
+export declare function describeStoredAuthFailure(kind: AuthFailureKind | null, detail: string | null): StoredAuthFailureReport;
 export declare const DEFAULT_HEARTBEAT_INTERVAL_MS = 120000;
 export declare const MIN_HEARTBEAT_INTERVAL_MS = 1000;
 export declare const MAX_HEARTBEAT_INTERVAL_MS = 300000;
@@ -530,6 +546,11 @@ export declare class AppSyncClient {
      * round-1 Codex M1.
      */
     private lastAuthFailureKind;
+    /**
+     * The credential-store error message behind a `credential_storage_unavailable`
+     * failure (it names the cause and the fix). `null` for every other outcome.
+     */
+    private lastAuthFailureDetail;
     /**
      * Sentinel set inside `performRefresh` / `callCognitoRefresh` when
      * the refresh round-trip fails with a network-shaped error (DNS,
@@ -592,6 +613,8 @@ export declare class AppSyncClient {
      * cannot repair a locked or unavailable keyring.
      */
     getLastAuthFailureKind(): AuthFailureKind | null;
+    /** The credential-store error message behind a `credential_storage_unavailable` failure. */
+    getLastAuthFailureDetail(): string | null;
     /**
      * Heuristic — does the error message look like a transient network
      * failure rather than an auth-token rejection? Used for refresh-path
@@ -935,6 +958,23 @@ export declare class AppSyncClient {
         ok: boolean;
         ms: number;
     }>;
+    /**
+     * Hosted Gemma advisory text generation (browse synthesis, brainstorm, etc.).
+     *
+     * Implements `PlannerAppSyncTransport.generatePlannerAdvisory`.
+     * Input `prompt` is base64 AES-GCM ciphertext under the session key.
+     * Output `advisoryText` is base64 AES-GCM ciphertext under the session key.
+     */
+    generatePlannerAdvisory(input: {
+        sessionId: string;
+        prompt: string;
+        maxTokens?: number;
+        temperature?: number;
+    }): Promise<{
+        advisoryText: string;
+        serverLatencyMs: number;
+        providerUsed: string;
+    }>;
     /**
      * CP-8 min Stage 1 R1 HIGH-1 closure (Hendry-approved 2026-05-19).
      *

package/node_modules/@quantiya/codevibe-core/dist/appsync/index.d.ts

@@ -1,4 +1,5 @@
-export { AppSyncClient, AppSyncAuthenticationError, AppSyncGraphQLError, DownloadUrlResponse, resolveHeartbeatIntervalMs, DEFAULT_HEARTBEAT_INTERVAL_MS, MIN_HEARTBEAT_INTERVAL_MS, MAX_HEARTBEAT_INTERVAL_MS, isRecognizedNonProductionEnvironment, RECOGNIZED_NON_PRODUCTION_ENVIRONMENTS, } from './appsync-client';
+export { AppSyncClient, AppSyncAuthenticationError, AppSyncGraphQLError, DownloadUrlResponse, resolveHeartbeatIntervalMs, DEFAULT_HEARTBEAT_INTERVAL_MS, MIN_HEARTBEAT_INTERVAL_MS, MAX_HEARTBEAT_INTERVAL_MS, isRecognizedNonProductionEnvironment, RECOGNIZED_NON_PRODUCTION_ENVIRONMENTS, CREDENTIAL_STORAGE_UNAVAILABLE_EXIT_CODE, describeStoredAuthFailure, } from './appsync-client';
+export type { AuthFailureKind, StoredAuthFailureReport } from './appsync-client';
 export { coerceAwsJsonObject } from './appsync-client';
 export type { ClassBPacketEnvelopeMeta } from './appsync-client';
 export type { TaskReviewSummary, TaskReviewSummaryRound, TaskReviewSummaryReviewer, TaskGroupStatusResult, PutContextItemInput, } from './appsync-client';

package/node_modules/@quantiya/codevibe-core/dist/appsync/queries.d.ts

@@ -44,6 +44,7 @@ export declare const mutations: {
     updateReviewerPolicy: string;
     classifyPlannerPrompt: string;
     pingPlanner: string;
+    generatePlannerAdvisory: string;
     applyUserDecision: string;
     submitGateDecisionV2: string;
     submitGroupDecisionV2: string;

package/node_modules/@quantiya/codevibe-core/dist/index.d.ts

@@ -11,6 +11,8 @@ export { AppSyncClient, AppSyncGraphQLError, DownloadUrlResponse } from './appsy
 export { queries, mutations, subscriptions } from './appsync';
 export { isPersistedEventResult } from './appsync';
 export type { PutContextItemInput } from './appsync';
+export { CREDENTIAL_STORAGE_UNAVAILABLE_EXIT_CODE, describeStoredAuthFailure } from './appsync';
+export type { AuthFailureKind, StoredAuthFailureReport } from './appsync';
 export { AuthService, authService } from './auth';
 export { bindOAuthServer, PRIMARY_PORT, PORT_RANGE_SIZE } from './auth';
 export { runAuthCli } from './auth';
@@ -37,7 +39,7 @@ export * as CredentialBroker from './credential-broker';
 export * as SubstrateLaunch from './substrate-launch';
 export * from './types';
 export * as Planner from './planner';
-export { CompositePlannerAdapter, type CompositePlannerAdapterOptions, } from './planner';
+export { CompositePlannerAdapter, type CompositePlannerAdapterOptions, type AdvisoryRunner, type AdvisoryOptions, type AdvisoryResponseFormat, type LocalGemmaAdvisoryRunner, type LocalGemmaAdvisoryOptions, type LocalGemmaAdvisoryResponseFormat, HostedGemmaAdvisoryRunner, type HostedGemmaAdvisoryRunnerDeps, type HostedAdvisoryTransport, CompositeAdvisoryRunner, type CompositeAdvisoryRunnerOptions, } from './planner';
 export { assertReviewerVendorCredential, reviewerProviderFor, withReviewerCredentialPreflight, ReviewerCredentialMissingError, assertImplementorVendorCredential, implementorProviderFor, withImplementorCredentialPreflight, ImplementorCredentialMissingError, type ReviewerCredentialStore, } from './substrate-launch';
 export { OllamaGemmaPlannerRunner, type OllamaRuntimeConfig } from './local-model/ollama';
 export * as Continuation from './continuation';