@quantiya/codevibe-codex-plugin 2.0.6 → 2.0.8

package/{bin/codevibe-codex → libexec/companion-launcher}

@@ -1,6 +1,6 @@
 #!/bin/bash
 #
-# codevibe-codex - Wrapper to run Codex CLI inside tmux for mobile control
+# Private CodeVibe Companion launcher for Codex CLI.
 #
 # This script launches Codex CLI inside a tmux session, enabling:
 # - Mobile prompts when screen is locked (via tmux send-keys)
@@ -8,18 +8,14 @@
 # - Automatic sync with iOS app via session log watching
 #
 # Usage:
-#   codevibe-codex [codex-args...]
-#   codevibe-codex login              # Sign in via browser
-#   codevibe-codex logout             # Sign out
-#   codevibe-codex status             # Show auth status
+#   codevibe --agent codex [-- codex-args...]
 #
 # Environment:
 #   ENVIRONMENT                        # Set to 'production' (default) or 'development'
 #
 # Examples:
-#   codevibe-codex                    # Start new session
-#   codevibe-codex "fix the bug"      # Start with prompt
-#   ENVIRONMENT=development codevibe-codex login  # Login to development
+#   codevibe --agent codex
+#   codevibe --agent codex -- "fix the bug"
 #
 
 set -e
@@ -45,7 +41,7 @@ PLUGIN_DIR="$(dirname "$SCRIPT_DIR")"
 # When the install one-liner runs in a fresh terminal, Homebrew's
 # installer writes the shellenv eval into ~/.zprofile (and similar)
 # but the user's current shell hasn't sourced it yet. Subsequent
-# codevibe-* runs in that same terminal then fail tmux discovery
+# CodeVibe Companion launches in that terminal then fail tmux discovery
 # because /opt/homebrew/bin isn't on PATH. Prepend common locations
 # so the wrapper recovers without forcing the user to open a new
 # terminal. Prepend (not append) is deliberate: the Homebrew binary
@@ -124,76 +120,29 @@ cv_failed() {
   cv_telem "wrapper_failed" "\"reason\":\"$1\",\"lifetime_seconds\":$(( $(date +%s) - _CV_STARTED_AT ))"
 }
 
-# Handle auth commands (login, logout, status, reset-device) and the
-# orchestration subcommand suite (setup/enable/disable/status/configure).
-# Delegate to codevibe-core CLI (shared auth + reviewer-policy admin
-# across all plugins).
-case "$1" in
-    login|logout|status|reset-device)
-        CORE_CLI="$PLUGIN_DIR/node_modules/@quantiya/codevibe-core/bin/codevibe.js"
-        # Also check hoisted location (when installed via @quantiya/codevibe meta-package)
-        if [ ! -f "$CORE_CLI" ]; then
-            CORE_CLI="$PLUGIN_DIR/../codevibe-core/bin/codevibe.js"
-        fi
-        if [ -f "$CORE_CLI" ]; then
-            cv_telem "wrapper_started" "\"invocation\":\"auth_$1\",\"os\":\"$(uname -s | cv_sanitize)\",\"arch\":\"$(uname -m | cv_sanitize)\""
-            exec node "$CORE_CLI" "$1"
-        else
-            echo "Error: codevibe-core not found. Try reinstalling: npm install -g @quantiya/codevibe"
-            cv_failed "core_not_found"
-            sleep 1
-            exit 1
-        fi
-        ;;
-    orchestration)
-        # Phase 3.a (#190) setup wizard alias entry. Append
-        # --entry=codex_alias so GA4 wizard_started can attribute
-        # the run back to this plugin (per PHASE-3-A-DESIGN.md §4).
-        CORE_CLI="$PLUGIN_DIR/node_modules/@quantiya/codevibe-core/bin/codevibe.js"
-        if [ ! -f "$CORE_CLI" ]; then
-            CORE_CLI="$PLUGIN_DIR/../codevibe-core/bin/codevibe.js"
-        fi
-        if [ -f "$CORE_CLI" ]; then
-            cv_telem "wrapper_started" "\"invocation\":\"orchestration_${2:-help}\",\"os\":\"$(uname -s | cv_sanitize)\",\"arch\":\"$(uname -m | cv_sanitize)\""
-            exec node "$CORE_CLI" "$@" --entry=codex_alias
-        else
-            echo "Error: codevibe-core not found. Try reinstalling: npm install -g @quantiya/codevibe"
-            cv_failed "core_not_found"
-            sleep 1
-            exit 1
+# Keep a cheap internal diagnostic path for package and end-to-end routing
+# checks without consuming any public vendor argument.
+if [ "${CODEVIBE_COMPANION_DIAGNOSTIC:-}" = "version" ]; then
+    echo "codevibe companion codex $_CV_PLUGIN_VERSION"
+    command -v codex >/dev/null 2>&1 && codex --version 2>/dev/null | head -1
+    exit 0
+fi
+
+# Metadata commands are intentionally short-lived and do not create a
+# Companion session. Run them directly in the foreground so a TTY invocation
+# cannot race a detached tmux session that exits before attach. Arguments and
+# the vendor exit status are preserved exactly.
+case "${1:-}" in
+    --version|-v|--help|-h)
+        if ! command -v codex >/dev/null 2>&1; then
+            echo "Error: codex CLI is not installed." >&2
+            echo "Install Codex CLI with: npm install -g @openai/codex" >&2
+            exit 127
         fi
+        exec codex "$@"
         ;;
 esac
 
-# ─── Quorum 2.0 per-session CLI flags (2f.0.a.6) ──────────────────────
-#
-# Mirrors the codevibe-claude pattern (2f.0.a.4). `--orchestration` /
-# `--no-orchestration` override the user's server-side
-# User.orchestrationEnabledDefault for THIS session only. Stripped from
-# the args forwarded to codex (codex doesn't know about them); exported
-# as CODEVIBE_ORCHESTRATION_OVERRIDE so the daemon inherits via the env
-# chain from this wrapper → tmux env → daemon process.
-#
-# Accepted forms (mutual exclusion not enforced — last one wins):
-#   --orchestration       → CODEVIBE_ORCHESTRATION_OVERRIDE=true
-#   --no-orchestration    → CODEVIBE_ORCHESTRATION_OVERRIDE=false
-
-CODEX_ARGS=()
-for arg in "$@"; do
-    case "$arg" in
-        --orchestration)
-            export CODEVIBE_ORCHESTRATION_OVERRIDE="true"
-            ;;
-        --no-orchestration)
-            export CODEVIBE_ORCHESTRATION_OVERRIDE="false"
-            ;;
-        *)
-            CODEX_ARGS+=("$arg")
-            ;;
-    esac
-done
-set -- "${CODEX_ARGS[@]}"
-
 # Capture environment facts for the session-flow wrapper_started event.
 # Each probe is non-fatal — if a CLI is missing we record "missing" rather
 # than aborting; pre-flight checks below still gate execution. Every
@@ -233,6 +182,18 @@ cleanup() {
     local wrapper_exit_code=$?
     log "Cleanup triggered"
 
+    # `tmux attach-session` returns when the client DETACHES even though Codex
+    # continues running inside the tmux session. Killing the daemon here leaves
+    # that live Codex session disconnected on mobile. The daemon now monitors
+    # this exact tmux session and performs normal cleanup when the native
+    # session actually ends, so a detach transfers lifecycle ownership to it.
+    if [ "${_CV_TMUX_STARTED:-false}" = "true" ] \
+        && tmux has-session -t "$SESSION_NAME" 2>/dev/null; then
+        log "Tmux client detached while Codex remains active; leaving daemon running"
+        rm -f "${CODEVIBE_TMPDIR}/codevibe-codex-server-$$.pid"
+        return
+    fi
+
     # Fire wrapper_exited telemetry BEFORE killing the server so the MCP
     # log is intact when we grep for SessionStart. cv_failed sets
     # _CV_EXITED on pre-flight failures so this block won't double-fire.
@@ -791,7 +752,7 @@ done
 # wrapper's cleanup trap can report it via `wrapper_exited` telemetry —
 # tmux's own attach exit code is independent of the inner process exit.
 tmux new-session -d -s "$SESSION_NAME" -x "$(tput cols)" -y "$(tput lines)" \
-    "export CODEVIBE_CODEX_TMUX_SESSION='$SESSION_NAME'; export ENVIRONMENT='$ENVIRONMENT'; ${CODEVIBE_ORCHESTRATION_OVERRIDE:+export CODEVIBE_ORCHESTRATION_OVERRIDE='$CODEVIBE_ORCHESTRATION_OVERRIDE'; }$CODEX_CMD; printf '%s' \"\$?\" > '$_CV_CODEX_EXIT_FILE'; exit"
+    "export CODEVIBE_CODEX_TMUX_SESSION='$SESSION_NAME'; export ENVIRONMENT='$ENVIRONMENT'; $CODEX_CMD; printf '%s' \"\$?\" > '$_CV_CODEX_EXIT_FILE'; exit"
 _CV_TMUX_STARTED="true"
 _CV_AGENT_INVOKED="true"
 _CV_AGENT_STARTED_AT="$(date +%s)"

package/node_modules/@quantiya/codevibe-core/README.md

@@ -1,13 +1,15 @@
 # @quantiya/codevibe-core
 
-Core library for CodeVibe plugins — shared keychain, crypto, AppSync, authentication, session lifecycle, and network-resilience functionality. Used by [`@quantiya/codevibe-claude-plugin`](https://www.npmjs.com/package/@quantiya/codevibe-claude-plugin), [`@quantiya/codevibe-gemini-plugin`](https://www.npmjs.com/package/@quantiya/codevibe-gemini-plugin), and [`@quantiya/codevibe-codex-plugin`](https://www.npmjs.com/package/@quantiya/codevibe-codex-plugin).
+Core library for CodeVibe plugins — shared keychain, crypto, AppSync,
+authentication, session lifecycle, and network-resilience functionality. Used
+by the Claude, Codex, and Antigravity Companion plugins.
 
-**Current version:** `1.0.3`
+**Current 2.x candidate:** `2.0.7` (`next`; 1.x remains `latest` until promotion)
 
 ## Installation
 
 ```bash
-npm install @quantiya/codevibe-core
+npm install @quantiya/codevibe-core@next
 ```
 
 ## Features
@@ -40,8 +42,8 @@ codevibe status
 # Reset device identity (destructive - old sessions become inaccessible)
 codevibe reset-device
 
-# Use specific environment
-codevibe --env development login
+# Use a non-production development environment
+ENVIRONMENT=development codevibe login
 ```
 
 ## API Usage

package/node_modules/@quantiya/codevibe-core/dist/agy-cli-contract.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Shared Antigravity 1.1.2 CLI constraints.
+ *
+ * Agy no longer accepts a one-shot prompt on stdin. The prompt must therefore
+ * be one argv value, which is both process-list-visible and subject to the
+ * platform's per-argument exec limit. Keep one conservative cross-platform
+ * ceiling for every Agy spawn surface and fail closed rather than truncating.
+ */
+export declare const AGY_ARG_PROMPT_MAX_UTF8_BYTES: number;
+export declare function validateAgyArgPrompt(prompt: string | undefined, context: string): string;
+/** Redact every Agy `--print` value before audit, shell metadata, or logging. */
+export declare function redactAgyPrintArgv(argv: readonly string[]): string[];
+/** Remove Agy prompt values from an error detail before it crosses a boundary. */
+export declare function redactAgyPrintValuesFromText(text: string, argv: readonly string[]): string;